Secure age verification

Age verification that can't leak your customers' data.

Identified checks age from a government document that's encrypted on the user's phone and never decrypted — not by you, not by us. Your platform gets a plain yes/no. If we get hacked, or you do, there is no name, birth date or passport image to take.

Birth date (encrypted on device)
3a91 c4d2 e7f0 a18b 5c2d 9e4f 7b00 d3a1 c4d2 e7f0 a18b 5c2d 9e4f 7b00 d3a1 c4d2 e7f0 a18b 5c2d 9e4f 7b00 d3a1 c4d2 e7f0 a18b 5c2d 9e4f 7b00 d3a1 …
Server returns
over 18

No name, no DOB, no document number — this is everything a full database dump would give an attacker.

The security case

A breach on our side never becomes your incident.

Every other age check copies identity documents into a database — yours, or your vendor's. Sooner or later that database is the headline. Identified is built so the data is never in readable form anywhere in the chain.

Nothing worth stealing

Personal data is encrypted on the user's phone and the age check runs directly on the ciphertext. It's never in plaintext on our servers or yours. An attacker with full access to our database walks away with random-looking bytes.

Forged IDs stopped on the device

Passport NFC chips carry government signatures. Identified verifies the document is genuine on the device, so fakes are rejected before they reach your platform — and no scan or document image has to be retained to prove the check happened.

One bit of attack surface

A single request returns one thing: is this person old enough? Set the threshold to 13, 16, 18, 21 — whatever the regulation requires. No biometrics, no document images, no PII in your database, your logs, your backups or your support tooling.

For platforms with hard age requirements

Meet the regulation without inheriting the breach risk.

Whether you're an alcohol retailer, a gambling site, an adult platform or building a new digital age-gate — set the minimum age your regulation demands and we handle the check. The identity data that would put you in a breach notification never exists on your side, or ours.

Get started →