ID Pass

Create an ID Pass API

Create an ID Pass generates a secure one-time link. Your customer opens it, gives consent, completes a liveness selfie if enabled and photographs one to three identity documents, which are verified through the Document Verification Service. You then retrieve a pass or fail result with the verified identity details.

Australian driver licence, passport, Medicare card, foreign passport with visa, Centrelink card, birth certificate and New Zealand driver licence, verified with their issuers
Liveness detection, face match between the selfie and the document photo, and cross-document name and date of birth checks, configured per link

Get API access Talk to us

For developers

After the technical detail?

For the technical detail, go to the API documentation. It holds the request and response schema, the integration guides and the error codes for this endpoint.

Request and response schema
ID Pass overview, validation strategies and user journey

View developer documentation

Accounts start in the sandbox. Production keys are issued once the account is approved.

Encrypted in transit and at rest Handled under the Australian Privacy Principles

What the check gives you

Verifying a customer's identity without building the flow yourself

A KYC check needs a document, a live person, and proof they are the same person. ID Pass runs that flow for you. You create a link with the documents you will accept, whether to run liveness, how long the link lasts and where results are sent. The customer completes it on their phone, and ID Pass verifies each document with its issuer through the DVS, matches the selfie to the document photo, and checks that the name and date of birth agree across documents. The result is retrieved with Read an ID Pass.

Which documents, and how many

One, two or three documents, with the allowed types set for each: licence, passport, medicare, visa, centrelink, birth_certificate or nz_licence. A document already verified cannot be reused for a later document.

How verification is done

Three strategies. DVS, the default, verifies each Australian document with its issuer and returns the DVS result. IDSP has Global Data return an identity opinion, valid or not valid, for accounts without their own DVS registration; it requires liveness. Basic validates formats and checksums only.

Liveness and face match

With liveness on, the customer records a short selfie video reviewed by a liveness detector that cannot be fooled by a photo, screen, video or mask. The captured face is then compared with the photo on the document.

Identified or anonymous

Send the customer's name and optionally date of birth in the requested identity and ID Pass fails the verification if the documents do not match them. Send nothing and check the verified identity yourself afterwards.

How a check runs

A link the customer completes, then a result you collect

Create the link, send it to the customer, and they complete the flow on their phone or desktop. Webhooks report each status change, and Read an ID Pass returns the final result with the verified identity.

The link is valid for 1 to 90 days, default 7. Images are retained for the number of days you set, up to 365. The response carries the link, the ID Pass ID and a cipher key that encrypts all personal information captured; Global Data discards the key once the ID Pass reaches a final status.

What it costs

A monthly subscription, drawn down as you run checks

Your subscription is credited to your account each month and each check consumes credits from it. If you go past the included amount, further checks are charged at a per-check rate. The rate depends on the volume you commit to, so the sales team is the fastest way to find where your business lands.

Pay as you go available
No lock-in contract

How billing works

Subscribe monthly, spend it as credits

The monthly subscription arrives as credits on your account.
Each check draws down credits as it runs.
Checks beyond the included credits are billed per check.
Higher monthly volume moves you to a lower rate.

Talk to sales about volume

Related checks

Others in ID Pass

Read an ID Pass retrieves the status, result and verified identity. Cancel an ID Pass stops a link that has not been completed. The DVS document endpoints run the same document checks without the hosted flow.

Cancel an ID Pass API Read an ID Pass API

All ID Pass endpoints

Questions

Questions we get asked about Create an ID Pass

Do we need a developer to implement this?

Yes. Create an ID Pass is a REST endpoint that returns a link, an ID and a cipher key, and the result is read with a second call or received by webhook, so a developer connects the flow to your onboarding system. The customer-facing part needs no development: it is hosted by Global Data. A sandbox with a deterministic test dataset is provided at no usage cost, so the integration can be built and tested before production keys are issued.

What does our system need to send?

Nothing is required beyond your API key. Optionally the link validity in days, image retention in days, whether to run liveness, the verification strategy, whether to require an ID photo and its stated purpose, the allowed document types for each of up to three documents, a webhook URL and the events to send, a return URL, and the customer's requested identity.

What comes back?

The ID Pass ID, the secure link to give to the customer, and the cipher key. All personal information captured during the check is encrypted with that key, and Global Data discards it once the ID Pass reaches a final status. If the key is lost the data cannot be recovered or decrypted, so it must be stored securely.

What does the customer see?

An introduction, a consent screen with your company name and privacy policy link, the liveness selfie if enabled, document capture with OCR and a chance to correct the details, manual entry for Centrelink cards and birth certificates, an optional ID photo, and completion or retry screens. It is optimised for mobile; a customer starting on desktop is prompted to scan a QR code.

Which verification strategy should we use?

DVS, the default, for full visibility of the DVS result on each document; it needs a DVS Identity on your account for live use. IDSP if you are not registered with DVS but need a compliant check; Global Data acts as the identity service provider and returns a valid or not valid opinion, and liveness must be on. Basic if you only need OCR, liveness and face match and will verify documents yourself.

Which authorities verify the documents?

Under DVS and IDSP, passports with the Department of Foreign Affairs and Trade, driver licences with NEVDIS, Medicare and Centrelink cards with Services Australia, visas with the Department of Home Affairs, birth certificates with the registry of the state or territory of registration, and New Zealand driver licences with the New Zealand licence issuer.

How is the customer's data protected?

All data stored for the ID Pass is encrypted at rest with the cipher key returned at creation, which Global Data deletes once the ID Pass reaches a final status, so it has no capability to decrypt the data afterwards. The requested identity you supply is encrypted the same way and never shown to the customer. Data in transit is encrypted and handling follows the Australian Privacy Principles.

How is this billed?

Each ID Pass is charged when created. Cancelling one that is still new or opened refunds the fee; once the customer has started the flow, no refund is issued.

Getting started

The first step to access is a conversation

New accounts begin with sandbox access, and production API keys are issued once the account has been commercially approved.

Get API access Talk to us

Call 03 9948 4089, 9am–5pm AEST Monday to Friday

Encrypted in transit and at rest

Handled under the Australian Privacy Principles

ISO 27001 Certified