Identity Proofing as a Service

Verify Identities Securely and Seamlessly

Imza Pass combines document scanning, NFC chip validation, and biometric verification into a single, fast, and privacy-first identity proofing experience.

AES-256
AI-Powered
Privacy First
Liveness Detection
Anti-Spoofing Biometric Check
Scanning Document
MRZ & Hologram Inspection
Reading NFC Chip
ICAO 9303 Cryptographic Sync
Identity Verified
Verification Report Generated
End-to-End Encrypted
Privacy by Design
Data Protection Compliant
Auditable Reports
How It Works

Five Steps to Verified Identity

A fast, guided flow powered by AI and cryptographic validation — from document capture to verified identity in under two minutes.

1
Document Capture
Photograph your ID or passport. Our OCR engine extracts MRZ data, document number, and expiry — detecting forgeries in real time.
OCR MRZ Forgery Detection
2
NFC Validation
Reads the document's NFC chip using ICAO 9303. Passive Authentication verifies it was issued by a legitimate authority — tamper-proof.
ICAO 9303 Tamper-Proof
3
Liveness Detection
AI-powered anti-spoofing captures a live selfie and blocks photos, masks, and deepfakes. Fraud-safe passive biometric check.
Fraud-Safe AI Anti-Spoofing
4
1:1 Face Matching
Compares the live selfie against the document photo and NFC portrait. Confidence-scored one-to-one biometric verification.
1:1 Matching Confidence Score
Identity Verified
All checks pass. A detailed verification report is generated instantly — available as PDF, JSON, or XML for audit and compliance.
Verified PDF / JSON / XML
Seamless Integration

Two Flows. One Standard. Zero Friction.

Plug Imza Pass into any application via standard OpenID Connect. Pick the flow that fits your platform — both return the same verified identity.

QR Code Flow

Desktop & Kiosk

Display a dynamic QR code on screen. The user scans it with their phone to launch a secure verification session on their own device.

Your app sends an OIDC authorization request
A time-limited QR is rendered on the page
User scans & completes verification on mobile
You receive a signed OIDC ID token
Desktop Kiosk Cross-Device

Deep Link Flow

Mobile-First

A single tap opens the Imza Pass app directly. No QR needed. Verification completes natively and control returns seamlessly to your app.

Your app triggers an OIDC request with deep link URI
Deep link opens Imza Pass on the device
All steps complete natively in-app
Callback delivers a signed OIDC ID token
Mobile App Mobile Web Single Tap

What You Receive

OIDC ID Token

Both flows return a signed JWT containing verified identity claims — ready for your backend to consume.

Decoded Payload
{
  "sub": "usr_8f3a…c91e",
  "given_name": "Amine",
  "family_name": "Belhaj",
  "document_type": "national_id",
  "document_number": "A012****",
  "nfc_verified": true,
  "liveness_passed": true,
  "face_match_score": 0.94,
  "verification_level": "high",
  "iss": "https://idp.imzapass.net",
  "iat": 1711468800
}
Key Features

Built for Security and Speed

Every aspect of Imza Pass is designed to protect sensitive data while delivering a fast, frictionless user experience.

AES-256 Encryption
All biometric data, documents, and reports are encrypted at rest and in transit with military-grade encryption.
Consent Management
Explicit user consent is captured, versioned, and timestamped before any personal data is processed.
Data Retention Policies
Configurable retention periods automatically purge verification data and reports after the designated timeframe.
Verification Reports
PDF, JSON, and XML reports with detailed results, scores, and compliance data — ready for audit.
Multi-Client Architecture
Onboard multiple clients with individual configurations, thresholds, and customizable verification workflows.
Standards-Based APIs
RESTful APIs secured with OAuth 2.0 scopes. OpenID Connect for identity claims. No proprietary lock-in.

Designed for Regulatory Compliance

Imza Pass is architected with privacy at its core — employing encryption, consent tracking, and automated data lifecycle management to meet Algerian data protection requirements.

Privacy by Design
Algerian Data Protection Compliant
Encrypted Data at Rest
Automated Data Retention