Everything you need to verify anyone.
Document forensics, liveness detection, face match, sanctions screening (beta) and a human review queue — one API, 15 credits ($0.15)per full verification. Add KYB, email OTP or WhatsApp OTP when your workflow needs them.
Read and validate any government ID.
OCR extracts every field. MRZ check-digits and per-country checksums prove the number is internally consistent. AI tamper analysis flags photo substitution, screen recapture and digital edits.
In plain terms: we read the ID the way a border officer would and prove it isn't forged — so fake documents never make it into your product.
- 33 document specifications across 23 countries
- Universal ICAO-9303 passport MRZ — plus CNIC, Aadhaar, Emirates ID
- Tamper, screen-recapture and copy-paste detection
- Structured fields with per-field confidence
P<GBRMORGAN<<ALEX<J<<<<<<<<<<<<<<<<<<<<<<<<<
P1234567<1GBR9103144M3108022<<<<<<<<<<<<<<02Prove a real, present person.
Liveness is passive today: the applicant takes a short live selfie in the browser, and an AI model reviews several of the captured frames for signs of a printed photo, a screen replay or a mask. The selfie is then matched 1:1 to the document portrait. Low-confidence results are routed to review rather than approved. Server-verified active liveness (randomly selected movements checked on the server) is in development and is not yet in production.
In plain terms: we confirm a real person is actually there and that their face matches the ID — so a stolen document alone gets a fraudster nowhere.
- Live selfie captured in the browser — no app install
- AI review of several frames for print, screen-replay and mask attempts
- Low-confidence results routed to review, never silently approved
- Server-verified active challenge: in development (not yet live)
- 1:1 face match against the document portrait
Screen against official watchlists.
Sanctions screening (beta) checks verifications decided by OKIAS against entries imported from the official OFAC, EU and UN lists (refreshed daily) and a UK list that is being moved to the current UK Sanctions List. Fuzzy name matching flags likely hits — and routes possible matches to a human instead of auto-declining on a name. Verifications you decide yourself (merchant-decision mode) are not screened yet. Beta because name matching is order-sensitive: treat it as one control among several, not your sole sanctions defence.
In plain terms: we check names against government sanctions lists and flag possible matches for a person to review — one control in your compliance programme, not a guarantee.
- OFAC, EU and UN sanctions lists (UK source being updated)
- Fuzzy name matching (Jaro-Winkler)
- Possible matches route to a human — never a name-only auto-decline
- Clear hit / no-hit reason codes
Possible matches route to a human — never a name-only auto-decline.
A workspace for the edge cases.
Borderline verifications route to a review queue where your team sees every signal, weight and captured image — then approves or declines. The final decision is what gets billed, never the interim review.
In plain terms: when the machine isn't sure, a human decides — so good customers aren't bounced by an algorithm, and you only pay for the final answer.
- Side-by-side document, selfie and signal breakdown
- One-click approve / decline with audit trail
- Role-based access and reviewer attribution
- Charged once, only if the final decision is approved
Every decision ships with its evidence.
A deterministic engine — not a black box — turns the signals into approve, review or decline. Each outcome carries machine-readable reason codes, so you can audit and defend any decision.
In plain terms: you always know exactly why a user was approved or declined — so you can answer your bank, your auditor or a regulator with evidence.
- Deterministic rules over raw scores — reproducible every time
- Machine-readable reason codes on approve, review and decline
- Per-stage scores and weights in the verification detail (AI-scored checks)
- A full audit trail for every reviewer and decision
{
"id": "cms7yq4b2000hoea1n3v8kz1x",
"status": "DECLINED",
"risk_score": 71,
"reason_codes": ["FACE_MISMATCH"],
"mode": "LIVE",
"completed_at": "2026-07-07T10:04:11.900Z"
}{
"id": "cms80k9ix001moea2jxy64fgu",
"status": "APPROVED",
"risk_score": 8,
"reason_codes": []
}
The workspace around every decision · example workspace — sample data
Share, brand and power verifications on your terms.
Three console features for teams that onboard people without writing code, want their own AI bill, or need the flow to carry their own brand.
Shareable KYC links
One link for many people — each opener gets their own independent verification. Set a use limit, an expiry and a per-IP daily cap; pause, resume or revoke any time and export results as CSV.
Read the docsBring your own AI key
Run AI verifications on your own Google Gemini key and pay Google directly for model usage; OKIAS charges only a platform fee. If your key fails, the verification is refused — never silently run on OKIAS AI.
Read the docsWhite-label & merchant decisions
A prepaid subscription unlocks your own brand name, colours and logo on the hosted flow (after OKIAS approval) and lets your team make the final approve / decline call on manual projects.
Read the docsOne integration, worldwide passport coverage.
Universal ICAO-9303 passport MRZ covers 190+ countries, with deep verification templates — national IDs, licences, residence permits — for 20+ high-volume countries.
In plain terms: your users can sign up with the ID they already carry, wherever they live — and expanding into a new market needs no extra integration work.
Built to hold identity data.
Encryption in transit and at rest, signed webhooks, scoped API keys and least-privilege access — with retention rules, audit logging and DSAR support built in.
In plain terms: your users' identity data stays locked down, every access is recorded, and it can be deleted on request — the way regulators expect.
Field-level encryption
Personal data encrypted at rest per field with AES-256-GCM. Key rotation is on our roadmap.
HMAC-signed webhooks
SHA-256 signatures so you verify every event before acting.
Data retention
Platform retention windows with automatic purge of verification media.
GDPR / DSAR
Subject-access and erasure requests handled end to end.
Scoped API keys
Per-key domain binding, least-privilege, instantly revocable.
Full audit log
Every staff document view and decision recorded with reviewer attribution (a customer-facing audit log is on the roadmap).
KYB — verify companies and their owners
RoadmapRegistry lookups, UBO resolution, director KYC and business screening — through the same API surface. On the roadmap; talk to sales for early access.
Ship compliant onboarding today.
1,500 free credits after you verify your e-mail, no card required. A full AI KYC — document, liveness, face match and screening — is 15 credits ($0.15), and Manual KYC is 5 credits ($0.05), charged only when the verification is approved.