IDMERIT

Database matching is the core mechanism: submitted identity details query licensed sources in more than 90 countries and return a match rate, and that matching would survive the removal of every model. Machine learning, facial recognition and liveness biometrics power IDMscan and IDMlive where a customer buys them, a real but bounded layer.

Full automation is the headline: the identity verification page promises no human interaction and pitches IDMscan as replacing manual review. A privacy policy line requiring explicit consent for solely automated decisions with significant effects, where law requires, is never reconciled with that headline, and no threshold or review queue is described.

Accuracy, false accept and false reject rates are unpublished, and IDMlive, sold for liveness and deepfake detection, cites no independent presentation attack testing. Pages have described its screening product as 100 percent accurate, a figure no screening product can substantiate.

TransUnion, Paysafe and eToro appear among the homepage logos, and Universal Companies is said to entrust it with identity verification, but no result is attached to any of them. More than 5 billion people verified and more than 440 data sources describe coverage, not outcomes.

Personal data may be used to train its systems where law allows, and aggregated, anonymized data feeds fraud detection and industry analysis. Nothing bounds whose data trains what, and documents, facial images and liveness captures go unmentioned.

The privacy policy, effective July 15, 2026, reaches API data: IDMERIT acts as processor, keeps identifying data for at most one hour by default and transfers it under standard contractual clauses. Its category table marks biometric information as not collected although IDMlive performs face match and liveness, and no subprocessor list is given.

ISO/IEC 27001:2013 certification was announced in April 2020 through an assessor accredited by the ANSI National Accreditation Board, and the homepage now says SOC 2 compliant and ISO 27001 adherent. The 2013 edition has since been withdrawn and adherent is not certified, so whether a current certificate exists is open.

Formal certification under national identity trust frameworks exists in this field, yet no license, registration or such certification is stated. Adherence to GDPR and CCPA is an obligation, not standing.

Income, education and gender are among the demographic factors the identity verification page lists as examined to improve fraud detection, though it does not say they decide an outcome. Those two can act as proxies for protected traits and gender is itself protected in most markets, yet no fairness testing or lawful basis is published beside the practice.

Individuals may request correction of inaccurate data, routed to the client where IDMERIT is processor, but IDMERIT publishes no commitment behind a match. With a fully automated path and a result delivered without the underlying records, the institution refusing a person may not know which source produced it.

Document scanning, face match and deepfake detection carry no named model provider, family or version. Data sources appear only by category, from credit files to mobile network operators, though source breadth is the stated differentiator.

Eleven separately named services run through APIs, IDMkyc has its own developer documentation site, and IDMconnect reaches more than 2,300 utility and telecom providers in over 40 countries. That depth runs upstream to data suppliers, none of them named, and no system on the buyer's side is named as a target.

Amazon Web Services appears on the homepage as host, but no region, jurisdiction or private deployment is stated. Queries hit national data sources under each country's privacy law, so where documents and facial captures are processed matters.

Every commercial route ends in a demo booking or a phone number, with no trial, self service signup or published price. For a modular platform, a buyer cannot tell whether cost follows queries, matched records or countries covered.

Financial services, crypto exchanges and forex platforms headline the homepage, and industry pages reach into insurance, healthcare and border security. Banks, credit unions and lenders share a single financial services treatment rather than material of their own.