IdentityOS.

What happens inside

Five checks. One explainable decision.

1. DocumentPolicy-gated: passports and IDs where capture is lawful. Ghana Card goes authoritative-first.
2. LivenessPresentation-attack detection on a live capture.
3. Face matchLive face against the document portrait.
4. FraudDevice, velocity, reuse and duplicate-face signals.
5. DecisionApprove, review or reject — with reason codes.

Every automated check records its engine, model version, configuration and threshold version.

Built for developers

One request starts an onboarding.

curl https://identityos.dev/api/public/v1/onboarding/sessions \
  -H "Authorization: Bearer $IDENTITYOS_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: sandbox-onboarding-001" \
  -d '{
    "client_reference": "sandbox_customer_001",
    "country": "GH",
    "document_type": "ghana_card"
  }'

Scoped API keys. Signed webhooks. Idempotency, replay protection and retries built in.

Built for operations

Reviewers see evidence, not guesswork.

Security at the core

Sensitive data stays inside.

Identity vault

Document images, liveness captures and biometric representations are stored separately, accessed via short-lived signed URLs.

Audit trails

Every view, decision, export and deletion is an append-only event.

Minimal client data

Clients receive a verified profile and check summaries — never raw images or templates by default.

Access controls

Organisation-isolated data, least-privilege roles, separate sandbox and production.

Provider-agnostic

Document, biometric and fraud engines sit behind adapters and can be replaced.

Explainable decisions

Reason codes, checks performed and rule versions are stored with every outcome.

Future-ready verification

Ready for authoritative identity.

Document checks, liveness and face match are not the same as verifying identity against a national register.

IdentityOS includes an authoritative identity provider adapter so an approved provider can be connected later without changing client integrations. Today, every result reports authoritative_identity: not_performed.