Regulatory Urgency

Certified. Regulated.

Built for the rules that are already here.

The Online Safety Act is in force. Ofcom is issuing fines. HM Treasury has confirmed how digital verification applies to AML obligations. The question for regulated businesses is no longer whether to verify, but whether your verification will stand up when the regulator arrives.

OneID is a digital verification services provider certified under the UK’s Digital Verification Services Trust Framework, regulated by the FCA, and built to produce the evidence trail your compliance team needs.

See pricing

What has changed and what it means for your business.

Online Safety Act

The Online Safety Act came into force in July 2025. Ofcom has opened 21 investigations and issued its first fine exceeding £1 million. Platforms providing user-to-user services or publishing regulated content are required to implement age assurance measures. Ofcom rates Open Banking and mobile network operator checks as highly effective age assurance methods. OneID offers five of Ofcom’s seven highly effective methods through a single integration.

HM Treasury & DSIT Guidance

HM Treasury and DSIT published guidance in February 2026 confirming how firms in scope for UK AML regulations can use Digital Verification Services to meet Customer Due Diligence obligations. For financial services, gambling, crypto, legal, and accounting firms, certified DVS providers are now a recognised route to CDD compliance.

DVSTF v1.0

The Digital Verification Services Trust Framework moved to version 1.0 in March 2026, introducing dedicated rules for Orchestration Service Providers and Holder Service Providers for the first time. OneID was the first provider certified in both roles.

Certified verification produces a different kind of evidence.

Identity verified to UK standards

The Data (Use and Access) Act 2025 established the legal framework for digital verification in the UK. Certification means the provider has been independently assessed for IT security, fraud prevention, risk management, and issue handling.

Defined level of confidence

This includes activity history, fraud checks, and provenance of the identity data. The verification confirms a real person (liveness) and the right person (biometric or data match), using data digitally signed by a verified party.

Digitally signed audit trail

Every check produces a regulatory-grade evidence artefact. When an auditor, regulator, or enforcement body asks how you verified a customer, the answer is documented, traceable, and defensible.

Three steps. Seconds, not minutes.

OneID routes each customer to the most appropriate verification method based on who they are, what device they are using, and what your compliance requirements demand.

01

Match

The customer is presented with a verification method matched to your platform and audience. This could be a bank login, a document scan, a mobile number check, a facial age estimation, or a digital wallet credential.

02

Verify

OneID verifies the required attributes — name, address, date of birth, age threshold, or other claims — using data from the matched source. Where enhanced requirements apply, additional data sources are layered in automatically.

03

Outcome

A clear, defensible outcome is returned. A regulatory-grade result with match confidence, claims, and an audit trail. No identity documents stored. No sensitive personal data retained.

3 seconds
Bank-verified identity
< 12 seconds
Enhanced KYC

Multiple verification methods. One integration. Audit-ready outcomes.

OneID routes each customer to the most appropriate verification method for the platform, audience, and compliance requirement. Methods include bank-verified identity, document authentication, mobile number age checks, facial age estimation (on-device, no biometric data stored), liveness detection, digital wallet credentials, and international eIDs.

3 seconds
Bank-verified identity
< 12 seconds
Enhanced KYC
37
Authoritative data sources
Zero
Personal data stored

Configurable KYC match counts allow businesses to verify identity across multiple independent data sources, not just credit reference agency checks. Every verification produces a clear, explainable outcome with an evidence trail.

OneID does not store personal data. Data stays with the customer’s bank, mobile operator, or government department. OneID stores consent and retrieves data at the point of need using secure APIs and biometric passkeys.

Is your verification audit-ready?

See how OneID pricing works for certified, regulatory-grade verification.

Live in under an hour.

A single API integration connects your platform to every verification method OneID offers. Identity verification, age verification, and agentic verification all run through the same integration. No separate builds. No separate vendors.

Documentation is written for engineers, not procurement teams.

View API documentation

Match the method to the customer.

Not every customer should go through the same verification process. A 25-year-old with online banking should not be asked to photograph their passport. A 65-year-old without a smartphone should not be asked for a face scan.

OneID offers multiple methods through a single integration: bank-verified identity, document authentication, mobile number age checks, facial age estimation (on-device, no biometric data stored), liveness detection, digital wallet credentials with passkey-secured reusable identity, and international eIDs.

37
Authoritative data sources
29
Connected UK banks
52M
UK adults covered

Pricing Calculator

Select your product and volume to get started