Identity & document authenticity

Verify genuine IDs and passports in one tap.

OneTap reads the secure chip in EU and US identity documents and cryptographically proves they are real, unaltered, and issued by a genuine authority. Age checks are just the beginning.

ICAO 9303 NFC · PACE Passive authentication 2D-DOC AAMVA

More than age verification

An identity engine, not a photo scanner.

Most “ID scanners” photograph the front of a card and guess. OneTap talks to the document’s chip and verifies the government’s own digital signature — telling genuine from forged. Age eligibility is simply one policy applied on top of a real authenticity result.

Explore capabilities →
  • Read NFC chips in EU & US identity cards and passports (ICAO 9303)
  • Cryptographically prove a document is genuine and untampered (passive authentication)
  • Verify document-signer authenticity and anchor to the issuing country (France today)
  • Verify signed barcodes — French 2D-Doc (ECDSA) and US driver licenses (AAMVA)
  • Extract identity data: name, date of birth, document number, nationality, expiry
  • Apply policy on top — age eligibility, expiry, jurisdiction rules
  • Fast, on-device verification — offline-capable, no data leaves the phone

The verification stack

Five layers between “looks real” and “is real.”

Each document passes an independent chain of cryptographic checks. If any layer fails, the result is not trusted.

01
NFC · PACE / BAC

Secure chip access

Opens an encrypted channel with the document chip using the ICAO 9303 PACE (or legacy BAC) protocol — the same access control used at automated border gates.

02
SHA · DG hash

Tamper detection

Recomputes the hash of the data read from the chip and matches it to the signed hash inside the Document Security Object (SOD). Any altered field fails instantly.

03
CMS · DSC

Authenticity signature

Verifies the SOD was cryptographically signed by a genuine Document Signer Certificate — proving the data was issued by a real authority, not fabricated.

04
X.509 · CSCA

Country trust anchor

Chains the Document Signer up to the issuing country’s root certificate (CSCA). France is fully anchored today; EU trust coverage is expanding.

05
ECDSA · 2D-Doc

Barcode signature

For document barcodes (French 2D-Doc, US AAMVA), verifies the issuer’s ECDSA digital signature to confirm the printed data is authentic and unmodified.

Who it’s for

Wherever a fake ID means real loss.

Any setting that needs to trust a person’s document in person — not just read it.

KYC & onboarding

Banks, fintech, crypto, bureaux de change

In-person identity proofing with genuine-document assurance — beyond a photo scan.

Access & security

Venues, events, buildings, visitor management

Fast one-tap entry with a real authenticity check on the presented ID.

Hospitality & rental

Hotels, short-lets, vehicle & equipment hire

Confirm a guest or renter’s ID is genuine and unexpired — legally required across much of the EU.

Regulated retail

Alcohol, tobacco / vape, cannabis, gaming

Prove legal age and catch forged IDs — one policy layered on real verification.

Assisted public services

Front desks, agencies, gov-adjacent checks

Staff-assisted authenticity checks on national IDs and passports at the counter.

Marketplaces & gig

Driver / host onboarding, P2P handovers

Confirm a counterparty’s document is real, face to face.

On the roadmap

From authentic documents to authenticated identities.

Available today: genuine-document verification for EU & US, fully anchored for France. Coming next:

Next

Face match (person ↔ document)

Read the chip’s facial image and match it to a live capture — proving the person present is the document holder, not just that the document is genuine.

Planned

Anti-clone chip authentication

Active / Chip Authentication so a copied chip cannot pass — a challenge-response that proves the chip is the original silicon.

Planned

Full EU + global trust coverage

The complete ICAO country-certificate master list plus revocation checking, extending fully-anchored verification to every issuing country.

Bring border-grade verification to your front line.

See OneTap read and verify a real document in seconds. Tell us your use case and we’ll set up a demo.

Request a demo