XBase Video KYC
Remote identity verification infrastructure
End-to-end digital onboarding with document capture, OCR/MRZ, NFC chip reading, liveness, face match and operator-assisted video calls.
- Device checkcam ✓ mic ✓ net ✓
- 2ID capturefront · back
- 3OCR / MRZchecksum ✓
- 4NFC chipSOD ✓ DG1=MRZ
- 5Livenessscore 0.97
- 6Face match0.91 ≥ 0.80
- 7Video callrec 04:12
Product Overview
Video KYC
What it is
XBase Video KYC combines every step needed to verify a customer's identity remotely, auditably and in line with regulation into one flow: device check, ID capture, OCR and MRZ reading, NFC chip verification, liveness, face match, an operator video call, risk scoring and an audit trail.
The problem it solves
Remote onboarding is secure not because verification steps are performed, but because each step's output is bound to the next in a state machine. Document data, chip data and the live image must be cross-checked, and the operator must see that evidence on a single screen.
Who it is for
Built for banks, payment and e-money institutions, crypto asset platforms and any regulated organisation onboarding customers remotely. Multi-tenant and white-label.
Core Features
Core Features
Device Check
Camera, microphone and connection quality are verified before the session.
ID Capture
Guided document capture with framing, glare and sharpness checks.
OCR and MRZ
Document fields are read, MRZ check digits verified and fields cross-checked against each other.
NFC Chip Reading
Chip reading through the mobile SDK and comparison of chip data against the document.
Liveness
Active and passive liveness checks against presentation attacks.
Face Match
Live selfie compared with the document and chip photo; the provider measures, policy decides.
Video Call
Operator call over a self-hosted SFU with recording and archive.
Operator Console
Queue, assignment, evidence view, decision and rationale; every action in the audit trail.
Risk Scoring
Step results and signals combine into a single risk score and decision.
Audit Trail
Every step, decision and operator action is stored as an immutable record.
Modules
- Device Check
- ID Capture
- OCR
- MRZ
- NFC
- Liveness
- Face Match
- Video Call
- Operator Console
- Risk Scoring
- Audit Trail
How It Works
How It Works
- 01
Session start
The institution opens a verification session via API; the customer enters the flow through a web or mobile link.
- 02
Document and chip
The customer captures the document; OCR/MRZ is read and, on supported devices, the NFC chip is verified.
- 03
Liveness and face
A liveness check runs; the selfie is matched against the document and chip photo.
- 04
Video call
Where the scenario requires it, an operator call is held and recorded.
- 05
Decision and notification
Risk score and operator decision combine; the result is delivered to the institution via webhook.
Architecture
Architecture
The platform manages each session as a state machine; steps are idempotent and retryable. The media layer (SFU and recording) is separate from the verification layer; OCR, liveness and face-match engines run behind a swappable provider abstraction.
- 01Verification APISession lifecycle, step results, decision and webhook delivery.
- 02Media planeSelf-hosted SFU, recording and composition; recordings in object storage.
- 03Engine abstractionSwappable providers for OCR, MRZ, liveness and face match, with timeouts and circuit breakers.
- 04Mobile bridgeiOS/Android SDK for NFC chip reading and native camera access.
- 05Operator consoleQueue, assignment, evidence view and decision UI.
- 06Audit and reportingImmutable audit log and regulatory reports.
- 01
Verification API
Session lifecycle, step results, decision and webhook delivery.
- 02
Media plane
Self-hosted SFU, recording and composition; recordings in object storage.
- 03
Engine abstraction
Swappable providers for OCR, MRZ, liveness and face match, with timeouts and circuit breakers.
- 04
Mobile bridge
iOS/Android SDK for NFC chip reading and native camera access.
- 05
Operator console
Queue, assignment, evidence view and decision UI.
- 06
Audit and reporting
Immutable audit log and regulatory reports.
Technologies
- Node.js
- TypeScript
- Next.js
- PostgreSQL
- Redis
- Docker
- Kubernetes
- WebRTC
Integration
Integration
REST API
Versioned, documented endpoints.
Webhook
Event-based, signed notifications.
SDK
Server and client libraries.
Web Integration
Embeddable web components.
Mobile Integration
iOS and Android SDKs.
Security
Security
Encryption
Media and document data encrypted in transit and at rest; per-tenant key separation.
Access control
Tenant isolation is enforced in the data access layer; operator roles and permissions are distinct.
Audit logging
Immutable audit trail at both application and database level.
Monitoring
Real-time dashboards for session success rate, step durations and provider health.
Data protection
KVKK-aligned retention, deletion and access requests; on-premise deployment keeps data inside the institution.
Use Cases
Use Cases
Remote account opening
Branch-free onboarding for banks and payment institutions.
Crypto platform onboarding
Identity and AML checks completed in a single flow.
Periodic re-verification
Refreshing existing customers' identity data at defined intervals.
High-risk transaction approval
Additional video verification before large transactions.
Deployment
Deployment
- Cloud
- Private Cloud
- On-Premise
- Hybrid
Let's talk about Video KYC
For a demo, technical depth or pricing, talk directly to our engineering team.