Summary

IDnow IDcheck.io PVID is a hybrid, asynchronous remote identity verification service that combines automated analysis of identity data with human verification performed by specialised operators.
The service is compliant with PVID certification.

Service description

IDcheck.io PVID guides the user through a capture journey using a mobile application or web browser. The user presents an identity document and then captures a video of their face.
Automated checks analyse this evidence before an operator reviews the results and the identity data.
It is asynchronous because verification takes place shortly after capture, without direct interaction between the user and the operator.
IDCheck.io PVID is designed for remote onboarding journeys that require a substantial level of assurance, traceability, and controls aligned with regulatory requirements and the customer’s internal policies.

Key capabilities

Identity document verification

Supports defined models of passports, national identity cards, and residence permits. The list of accepted models is maintained in the PVID policy and should be checked before production deployment.

Biometric verification and liveness detection

• Guided capture of a video of the user’s face.
• Automated liveness detection to reduce risks associated with presentation attacks, replay attacks, and physical or digital manipulation of the video.
• Performs face-video quality checks and provides automated guidance to improve capture conditions.

Specialised human review

The results of the automated checks and the collected evidence are presented to operators trained in identity document and biometric verification.

• Manual document checks based on controls predefined for each document model.
• Manual review of the face video, liveness results, and face comparison results.
• Separate operators may perform document and biometric checks.
• Escalation to an identity document fraud or biometric fraud specialist when a doubt is identified.
• Final automated consistency check of the activities performed by operators. This control can only change a “Success” verdict to “Failure”.

Identity fraud detection

IDCheck.io PVID uses an up-to-date analysis of identity fraud scenarios and indicators relating in particular to:

• the quality and integrity of the document video;
• whether the document model is supported;
• the condition of the document and its security features;
• the conformity of the MRZ and visible document area;
• consistency between the MRZ and visible information;
• the quality of the face video;
• whether the presented person is live;

Verification result

The result transmitted to the customer’s business service includes:

• a binary verdict: “Success” or “Failure”;
• a failure reason when verification is unsuccessful;
• identity attributes verified and permitted under applicable regulations;
• information relating to the identity document presented;
• a photograph extracted from the identity document;
• a photograph extracted from the face video;
• the MRZ and, where available and authorised, the Card Access Number (CAN).

A “Success” verdict indicates that the presented document has been verified as authentic and that the user is its legitimate holder.
A “Failure” verdict may result from suspected identity fraud, insufficient capture quality, an unsupported document, or a technical issue.
To limit the disclosure of sensitive information, the result does not include videos, detailed scores, or internal processing elements that led to the verdict. In cases of suspected fraud, the transmitted reason does not reveal the type of fraud or the checks that were triggered.

Evidence file and traceability

Before transmitting the result, IDnow creates and archives an evidence file, regardless of the outcome.
The evidence file is intended for dispute resolution and investigation purposes. Access is controlled, subject to authorisation, and logged. The data is stored in encrypted form, and the unarchiving procedure requires a quorum of authorised individuals.
Technical integration

• Mobile capture component that can be integrated into the customer’s application.
• Web capture application, embedded in or separate from the customer’s web journey.
• Guided capture of the identity document and face, with automated assistance for framing, lighting, reflections, stability, and required movements.
• Transmission of the verification result to the customer’s business service once the evidence file has been created and archived.
• User journey available in French and English.
• Operators located in the European Union, mainly in Romania, as well as in Spain and France.

Processing times

The average time between the start of capture and notification of the result to the customer’s business service is less than five minutes.
An additional review by a fraud specialist may extend this time. The maximum processing time is 96 hours. If no result has been transmitted to the customer’s business service after this period, the verification is automatically returned with a “Failure” verdict.

Data protection and retention

IDCheck.io PVID applies the principle of data minimisation and processes collected data for purposes including identity verification, dispute and appeal handling, evidence-file creation, and service improvement where the user has provided consent.

Regulatory framework

IDCheck.io PVID is implemented in accordance with the ANSSI Requirements Framework for Remote Identity Verification Providers (RPVID), version 1.1 dated 1 March 2021.