Live · BSP-aligned KYC

Verify identities,
beautifully.

Repay Trust is the identity verification engine that powers Repay. Document OCR, liveness checks, biometric face match, and sanctions screening — wired into one pipeline, ready to embed in your mobile or web app.

Open Admin Console View API Docs
Liveness + face match PII encrypted at rest Webhook decisions
What's inside

Everything you need to verify a person

A modular pipeline of independent checks. Run the ones you need, skip the ones you don't, and let Trust hand back a single decision.

Document OCR

Auto-extract name, doc_no, dob, and address from passports, national IDs, and driver's licences — normalised into one schema.

Liveness detection

Active and passive liveness signals reject replays, masks, and deepfake attempts before they reach the matcher.

Biometric face match

Match the selfie against the document portrait with a tunable similarity threshold. Per-customer policy controls.

ID authenticity

Detect tampering, photoshops, and template inconsistencies on ID images before trusting their contents.

Sanctions & PEP

Screen extracted names against international watchlists and politically-exposed-persons databases.

Field match

Compare submitted application data against OCR output. Flag mismatched names, DOB, or document numbers automatically.

Webhook decisions

Final pass / fail / review verdicts are pushed to your backend with HMAC-signed payloads and retry-with-backoff.

Mobile SDK

Drop-in Flutter SDK for capture, liveness, and upload — talks straight to Trust via per-session tokens.

PII encrypted at rest

Names, DOBs, and document numbers stored under per-deployment AES keys. Only the matcher decrypts on demand.

9
Verification checks
<30s
Median decision
2x
Blue/green replicas
100%
PII encrypted
How it works

One session token. Four steps.

Your backend asks Trust for a session, the SDK uploads captures and liveness video, Trust runs the policy, and your webhook receives the decision.

1

Init session

Your backend calls /kyc/init with the customer's policy. Trust returns a scoped session token.

2

Capture

The SDK opens, captures ID front/back, runs liveness, and uploads directly to Trust under the session token.

3

Verify

Trust runs OCR, authenticity, face match, and sanctions in parallel. Each check has its own verifier and policy.

4

Decide

The combined verdict (pass / fail / review) is webhooked to your backend with the signed evidence bundle.

API

The shape, not the details

Customer config, KYC sessions, and webhooks. Full schema and try-it in Swagger.

POST /kyc/init issue a per-customer session token
POST /kyc/submit SDK upload of captures + liveness
GET /kyc/sessions/:id poll session status and decision
POST /customers register a tenant + verification policy
POST /webhooks register decision callback URLs

Full reference

Ready to verify

Embed Repay Trust in minutes.

Plug the Flutter SDK in, point your backend at the API, and start verifying customers today.

Open Console Read the API