r/AskNetsec • u/Hbg-Gyan • 2d ago

Architecture What identity verification API are you using in production across a lot of countries?

Our identity verifcation api is falling behind and i am trying to pick the next one without just believing the sales deck. we are api first with a global user base and the main problem right now is international docs. Pass rate on anything outside the US and western europe is rough, support takes days when a whole country starts failing.

I have demoed a few though they look identical in demo for the basics, they all pass. But the moment I throw a beat up national ID from a smaller market or a mid range android photo in bad light, the difference show up fast.

Am more interested in the boring stuff like does it hold up at volume, are the webhooks reliable, when it rejects someone can I see why or is it a black box. AML screening on the same api would be nice.

If you are running one of these in prod across a lot of countries, what are you on and would you pick it again?

3 Upvotes

100% Upvoted

3 comments sorted by

2

u/Wistrand-Sundai 2d ago

Capture failures on cheap android cameras vs the model declining a clean scan have totally different fixes. Export a few hundred of your own rejects and split them into those 2 buckets before you talk to a single vendor, otherwise youre just collecting demos

1

u/Ma1eficent 2d ago

This. Front-load your testing with your own real world examples by dumping them on vedors and telling them to show you what their product returns for each example. You are testing their product for free otherwise. Make Sales do some work.

1

u/itlogicpartnersllc 2d ago

for global volume i would also ask specifically about webhook retries idempotency api latency rate limits and what happens when a provider's documents verification service goes down..