KYC and customer onboarding
KYC (Know Your Customer) is the process by which an institution reliably verifies its customer's identity before onboarding. TruvaLI executes this process by combining document reading, biometric verification, and screening steps into a single, unified workflow.
The real challenge in customer onboarding
Remote customer onboarding faces pressure from two sides. On one hand, regulations require identity verification beyond reasonable doubt. On the other hand, every additional step leads to drop-offs. Fragmented solutions make this balance difficult: document reading comes from one provider, liveness from another, and screening from a third, with none of them seeing the decisions made by the others.
TruvaLI runs all of these steps in a single request and returns a single decision.
Document analysis and OCR
- MRZ reading: The machine-readable zone on passports and ID cards is read and validated using checksums.
- NFC chip reading: Government-approved photos and identity details on the ID chip are read directly.
- Visual security check: Holograms, microprinting, watermarks, and edge-to-edge integrity are evaluated.
- Multi-document support: New and old Turkish ID cards, driver's licenses, passports, residence permits, and formats from over 150 countries.
- Proof of address verification: The name and address on utility bills or residency documents are matched against application data.
Biometric verification
The official photo retrieved from the chip is compared with a selfie taken by the applicant in real time, generating a face matching score between 1 and 100. The institution defines the threshold.
Liveness is checked in two ways. Active liveness works with random prompts (smiling, turning the head, blinking). Passive liveness performs micro-expression, depth, and reflection analysis using a single selfie, requiring no extra effort from the user. The anti-spoofing layer detects silicone and paper masks, screen replay attacks, and deepfake attempts.
Video call in case of suspicion
When suspicion arises regarding the risk score or face matching, the process is transferred to the platform's native video call interface without requiring any external licensing. Calls are randomly distributed to agents from a pool: customers cannot select agents, and agents cannot cherry-pick customers from a list. For details, please see the Video KYC page.
Monitoring continues after onboarding
Verification does not end once the customer is onboarded. When an email address, connecting IP, age, or (for corporate clients) ownership structure changes, TruvaLI detects this and recalculates the risk score based on real-time data.
Benefits for the institution
- Single integration, single decision: approval, rejection, or additional verification.
- The reasoning and evidence for every step are stored in an audit-ready format.
- Suspicious applications are automatically routed to video calls, ensuring process continuity.
- The process runs on the institution's own infrastructure: biometric data never leaves.
Common questions
- What is the difference between active and passive liveness?
- Active liveness requires a random action from the user, such as smiling, turning their head, or blinking. Passive liveness, on the other hand, performs micro-expression, depth, and reflection analysis on a single selfie, delivering the same decision without requiring any action from the user. The passive method increases completion rates, while the active method provides extra assurance for high-risk applications.
- Why is NFC chip reading important?
- Photos and identity details read from the chip are digitally signed by the government, making them much harder to forge than a photo of the front of the document. When the selfie comparison is performed against this official photo, the matching score becomes far more reliable.
- Do we need to purchase separate third-party software for identity verification?
- No. Document reading, chip verification, liveness, face matching, and compliant video calls are built into the platform. You do not need to allocate additional budget for separate licenses.
- Where is biometric data processed?
- All verification runs on the institution's own infrastructure. Selfies, document images, and chip data are not sent to external cloud environments, making it easier to meet special categories of personal data obligations under KVKK.