Capabilities

Everything OneTap verifies — and proves.

One tap runs a full chain of reads and cryptographic checks against a government document. Here is what sits under the hood.

NFC · ICAO 9303

Secure chip reading

Reads the contactless chip in modern passports and national eID cards. Establishes an encrypted session with PACE (or legacy BAC), then reads the data groups — the same protocol layer used by automated border gates. Modern chips such as the French CNIe are PACE-only; OneTap handles both.

Passive authentication

Genuine & untampered proof

Confirms the data read from the chip matches its signed hash, that the signature comes from a real Document Signer Certificate, and that the signer chains to the issuing country’s root. This is what separates a genuine chip from fabricated data.

ECDSA · AAMVA

Signed barcode verification

For documents that carry a signed 2D barcode — French 2D-Doc and US AAMVA driver licenses — OneTap decodes the barcode and verifies the issuer’s digital signature, confirming the printed data is authentic and unmodified.

Identity data

Structured field extraction

Returns the document holder’s name, date of birth, document number, nationality, sex, and expiry — parsed from the machine-readable zone and the chip, ready to drive your workflow.

Policy engine

Age, expiry & jurisdiction rules

Layer business policy on top of a verified identity: legal-age eligibility (configurable per country — e.g. 21 in the US, 18 in the EU), expiry checks, and jurisdiction-specific thresholds. Age is one rule among many, not the product.

Private by design

On-device & offline-capable

Verification runs on the phone. Trust-anchor certificates are cached locally, so checks work without a network connection and personal document data never has to leave the device.

Coverage today

EU & US documents, standards-based.

OneTap works with any ICAO 9303 electronic document — the global standard behind EU national eID cards and passports — plus US driver licenses. Authenticity is anchored to the issuing country’s certificate; France is fully anchored today, with EU-wide trust coverage rolling out.

How trust anchoring works →
Verified result
CHIP ACCESSPACE ✓
DATA INTEGRITYHash match ✓
SIGNER (DSC)Valid ✓
COUNTRY (CSCA)Anchored ✓
POLICYAge 18+ · Not expired

Put it to the test on a real document.

We’ll walk your team through a live scan and the verification result, end to end.

Request a demo