Identity verification any product can call.

01 — THE CHALLENGE

Every country, a different document.

Identity documents, formats, and liveness requirements vary enormously by country — and verification quality is not somewhere to cut corners. Building classifiers in-house means re-training and re-configuring every time a new country’s ID format shows up.

The brief was a KYC and document-management layer that other products — including the ride-share and wallet builds — can call as a shared service, with no per-country engineering.

02 — OUR APPROACH

Delegate the detection, own the lifecycle.

Verification is delegated to a vendor maintaining document templates and liveness checks for 200+ countries, reached through a native capture SDK that already localizes prompts per market.

What’s built in-house is the layer that’s genuinely product-specific: encrypted, region-segmented document storage, expiry tracking driven by structured dates, and re-verification workflows — none of which change based on which country’s document was uploaded.

03 — THE OUTCOME

Compliance as a capability, not a rebuild.

Scheduled scans and background workers monitor expiry and trigger re-verification automatically. Every access is written to an immutable audit trail acceptable to most regulators regardless of market.

A strictest-common-denominator retention policy — GDPR-style right-to-erasure available globally — proved simpler and safer than maintaining per-market rules. Partner products integrate through one API instead of each re-building verification.

04 — RESULTS

• Vendor-delegated document & liveness checks, 200+ countries
• Encrypted storage with region-pinned buckets
• Automated expiry scans & re-verification workflows
• Immutable audit trail on every document access
• GDPR-grade erasure applied as the global baseline
• One API consumed by multiple partner products