For compliance officers, CTOs, and integration teams

Provium Proof

Verification that leaves no residue.

API-first identity verification for businesses. Receive cryptographically signed receipts — the data tier you choose, the compliance posture you need, the breach surface you eliminate.

OIDC + OAuth 2.0
OpenAPI spec + sandbox
GDPR Article 25 by architecture
W3C Verifiable Credentials
Claims governance built in
Pursuing DIATF certification

Choose your data tier

Match your data handling to your risk appetite and regulatory requirements. Every tier includes a signed verification receipt.

Zero-Knowledge

No PII touches your servers

Receive a boolean assertion ("over 18: true") backed by a cryptographically signed receipt. Ideal for age verification, eligibility checks, and any scenario where you need proof without data.

Best for: Age-gated retail, gambling, social media, content platforms

Encrypted Token

PII available when regulation requires it

Receive an encrypted identity token you can decrypt and retain per your regulatory obligations. You hold the decryption key, not Provium. Full KYC/AML compliance.

Best for: Banking, insurance, legal services, regulated financial services

Attestation-Only

Lightweight compliance receipts

Receive a signed attestation that a specific check was performed ("driving licence valid as of date"). No PII, no tokens — just auditable proof the verification happened.

Best for: Car rental, hospitality, logistics, property management

Not sure which tier? Age-gated services start with Zero-Knowledge. Banks and regulated firms use Encrypted Token. Hospitality and car rental are typically Attestation-Only. The policy engine guides you through this during registration.

What you can verify

One API. Every check your industry requires.

Identity Verification

Passport, driving licence, national ID

Right to Work

UK Home Office-compliant, digital share codes

Right to Rent

Landlord-facing check with cryptographic receipt

Age Verification

Zero-knowledge — proves age without revealing DOB

Immigration Status

Real-time share code validation

KYB

Director identity, company registry, UBO checks

Background Checks

Criminal record, financial sanctions, PEP

Digital-to-Physical Bridge

Prove the person at reception matches the verified identity

Built for every industry

Industry-specific compliance rules enforced automatically. You request claims — the policy engine ensures you only receive what regulations allow.

Banking & Financial Services

Encrypted Token

Account opening, KYC/CDD, anti-money laundering checks. Verify customer identity instantly without storing passport copies.

Key claims:
Full nameDate of birthAddressNationalityDocument verification
Regulations: MLR 2017, PSD2, FCA Consumer Duty

Healthcare

Encrypted Token

Patient identity verification, staff credential checks, CQC Regulation 19 compliance. Patient data stays on their device.

Key claims:
Full nameDate of birthNHS numberDBS check status
Regulations: NHS DSPT, HSCA 2008, Caldicott Principles

Hotels & Hospitality

Attestation-Only

Instant guest check-in without photocopying passports. Verify identity at reception in seconds. No paper document storage.

Key claims:
Full nameNationalityDocument typeAge verification
Regulations: Immigration Act 2016, Right to Rent, GDPR

Car Rental & Mobility

Attestation-Only

Verify driving licence validity and identity instantly at pickup. Reduce fraud, speed up rental, eliminate document scanning.

Key claims:
Full nameDriving licence statusAge verificationAddress
Regulations: DVLA verification, GDPR, Insurance requirements

Education

Encrypted Token

Staff safeguarding checks for schools and colleges. Verify enhanced DBS and barred list status digitally — no paper certificates.

Key claims:
DBS check statusBarred list clearanceRight to workIdentity
Regulations: KCSiE 2024, SVGA 2006, DBS requirements

Legal Services

Encrypted Token

Client identity verification for AML compliance. Cryptographic proof — stronger than photocopied ID.

Key claims:
Full nameDate of birthAddressDocument number
Regulations: SRA Regulations 2019, MLR 2017, GDPR

Retail & E-Commerce

Zero-Knowledge

Privacy-preserving age verification for age-restricted products. Prove a customer is over 18 without ever seeing their name or date of birth.

Key claims:
Age verification (over 18/21/25)No PII needed
Regulations: Online Safety Act 2023, Licensing Act 2003

Telecoms

Encrypted Token

Customer verification for SIM registration and contract sign-up. Instant digital identity check replaces in-store document scanning.

Key claims:
Full nameDate of birthAddressIdentity verification
Regulations: Ofcom General Conditions, GDPR, Fraud prevention

Property & Lettings

Attestation-Only

Right to rent checks for landlords and letting agents. Meets Home Office requirements digitally.

Key claims:
Full nameRight to rent statusAddressIdentity
Regulations: Immigration Act 2014/2016, Right to Rent, MLR 2017

Insurance

Encrypted Token

Policyholder identity verification, claims fraud prevention, regulatory compliance.

Key claims:
Full nameDate of birthAddressDocument verification
Regulations: IDD, FCA regulations, MLR 2017

Travel & Aviation

Attestation-Only

Passenger identity verification for airlines and travel agents. NFC-verified passport data provides the highest assurance level.

Key claims:
Full nameNationalityDocument typePassport validity
Regulations: ICAO 9303, Immigration requirements

Logistics & Delivery

Attestation-Only

Driver identity verification, right to work checks for contractors, delivery authentication for high-value goods.

Key claims:
Identity verificationRight to workDriving licence status
Regulations: Right to work, GDPR, Employment regulations
Continuous compliance

Proof-type re-verification cycles

Define which identity proofs you need, why you need them, and how often they must be re-verified. The system enforces your schedule automatically — regulatory guardrails ensure you can never be less strict than the law requires.

How it works

01
Define your proof requirements
During registration, declare each proof type you need (e.g. age_bracket, identity, driving_licence), the legal basis, and your preferred re-verification interval.
02
System applies guardrails
The system compares your requested interval against regulatory minimums for your industry and country. The most restrictive (shortest) interval wins. Maximum cap: 365 days.
03
Schedule inherited by consents
When a user grants consent, the re-verification schedule is automatically attached. The system sets the first due date and tracks it from there.
04
Automatic notifications & enforcement
When re-verification is due, the user receives a push notification. If overdue, verification responses are flagged as stale. No manual tracking.

What you define

Proof type
Which identity claims you need (e.g. age bracket, driving licence status, identity)
Legal basis
The regulatory reason for each claim — used by the policy engine to validate your request
Re-verification interval
How often the claim needs refreshing. The system enforces the most restrictive interval.
Purpose
A plain-English reason shown to the identity owner when they approve sharing

Industry re-verification examples

Gambling & GamingRegulatory min
age_bracket30 days

Children's ages change monthly; gambling regulations require frequent re-verification to detect age bracket transitions promptly.

Social MediaRegulatory min
age_bracket90 days

Online Safety Act requires platforms to verify under-18 users regularly. Quarterly checks balance safety with user experience.

Banking & Finance
identity365 days

KYC regulations require periodic identity re-confirmation. Annual checks meet AML directive requirements.

Car Rental
driving_licence180 days

Driving entitlements can be revoked or expire. Six-monthly checks ensure licence validity for insurance purposes.

Safety guardrails

Regulatory floor — System-level rules set the minimum re-check frequency per claim type and industry. You can be stricter, but never more lenient.
365-day cap — No proof type can go longer than one year without re-verification. Prevents verify-once-and-forget for any claim.
Auto-revert — If re-verification detects low confidence or an age bracket change, the system automatically reverts to manual review.

Why businesses choose Provium Proof

Zero PII on your servers

You receive a signed receipt. The personal data never touches your infrastructure.

Cryptographic audit trail

Every verification is signed with a non-repudiable receipt — exportable for regulators.

GDPR Article 25 by architecture

Data minimisation is not a policy. It is the architecture. No configuration required.

W3C Verifiable Credentials

Open standards. Vendor-independent receipts your lawyers can verify without calling us.

REST API — hours to integrate

Full OpenAPI spec, sandbox environment, and SDKs. No bespoke contracts.

Multi-jurisdiction compliance

UK, EU, and global checks configured per your industry and jurisdiction automatically.

Ready to build on proof?

Start a business account and go live in hours. Full API documentation and sandbox environment included.