FAQ

Frequently Asked Questions

Coverage

  • What countries are documents accepted from?

    We accept documents from 220+ countries and territories, including all UN member states and their overseas self-governed territories, as well as some partially recognized states, such as Kosovo and Taiwan.

    For the full list of states, please refer to this table

  • In what languages does Sumsub support documents?

    We accept documents in most languages, including those written in Latin, Cyrillic, Hieroglyphic, and Semitic scripts. Support of Urdu, Farsi, Bengali and Arabic documents is available on demand.

    For the full list of languages, please refer to this article

  • Can the Sumsub interface be localized for our users?

    Yes, we support 30 languages. This helps you talk with customers in their language and, as a result, ensure a high conversion rate.
    If you need an additional language, please let us know.

Technical Requirements

  • Which browsers does Sumsub support?

    We support the latest versions of all popular mobile and desktop browsers for Android, iOS, Linux and Windows.
    For the full list of browsers, please refer to this article.

Products

  • Which verification services do you provide?

    Sumsub is a fully-featured onboarding and compliance environment. We offer KYC/AML and EDD services.
    For more information about our products, please refer to our website.

  • How do you perform KYC?

    Sumsub’s KYC/AML flow can include document-based/ selfie-based verification, liveness, and automated sanction and watchlist screening. We also have options for automating your reports to regulators.
    For more information about our KYC product, please refer to this article

  • Which documents do you accept?

    Sumsub can verify identity documents, proofs of address and documents written in Latin, Cyrillic, Hieroglyphic, and Semitic scripts. Support of Urdu, Farsi, Bengali and Arabic documents is available on demand.
    For more information about the documents we accept, please refer to these pages: identity documents, proof of address documents

  • Do you verify country-specific documents?

    We cover over 6,500 document types from 220+ countries and territories. Customers can set which documents are accepted for each country when adjusting verification levels and flows.
    For more information about the documents we accept, please refer to these pages: identity documents, proof of address documents

  • What constitutes identity verification and how is it reported back to us?

    Identity verification typically includes ID scanning, data extraction, and face scanning. However, additional steps can be added when setting verification flow. The results are reported to the customer in the form of a user status (approved/declined/requires action) and explanatory comments. The data can be transferred through webhooks and via API. Request a free demo to learn more about Sumsub’s dashboard and applicant review process.

  • How do I ensure the highest possible match rates?

    Sumsub's AI-based solution checks biometric data and submitted documents and ensures the highest possible match rate. Suspicious cases are additionally checked by our compliance experts for the final decision.
    For more information about our KYC product, please refer to our website.

  • What are the default fields you can extract from the ID and do they differ per country?

    Sumsub knows which fields should be extracted from IDs in different countries. If you want to extract data from additional fields, reach out to our sales representative for a custom solution.
    Request a free demo to learn more about the Sumsub dashboard.

Verification process

  • How much time does it take to verify a user?

    Normally, it takes around 60 seconds. However, this can vary depending on the verification steps and countries selected by the customer.
    Request a free demo to learn more about the applicant review process.

  • What’s included in the verification process?

    Identity verification typically includes ID scanning, data extraction, face scanning and face match. However, additional steps can be added when setting verification flows. The results are reported to the customer in the form of a user status (approved/declined/requires action) and explanatory comments. Compliance officers and support can also manually review user profiles and all uploaded images and videos if an investigation is needed. Besides that, depending on the service provided, Third-party processors (also known as sub-processors) may be involved in processing. Prior to engaging a Sub-processor, we ensure that they provide sufficient guarantees as regards personal data security.
    Request a free demo to learn more about the Sumsub verification process.

  • Do you hold information in data banks?

    We store user data in an encrypted format on GDPR-compliant Amazon servers, which are located in the EU.
    Depending on the service provided, the Third-party processors (also known as sub-processors) may be involved in processing. Prior to engaging a Sub-processor, we ensure that it provides sufficient guarantees as regards personal data security. These are kept at Uptime Institute-classified Tier III data centers compliant with TIA-942 and PCI DSS standards.
    We use AWS Amazon servers for data storage. The data centers are protected technically and guarded physically around the clock by specially audited security personnel. Please refer to this page to see the whole list of AWS data center locations, where your data can be stored.

    If you prefer to use another compatible data storage for a particular country, our Sales representative can offer you a custom solution.

    To learn more about Sumsub data security and compliance standards, please refer to this page.

  • How long do you store user data?

    The default data storage period is 5 years.

    The custom period can be determined based on your legal requirements and/or risk assessment policy.

    Your Consent or Privacy Notice (depending on the respective legal basis for processing) request is placed in a separate checkbox before verification, so users clearly understand what they are agreeing to. We can provide you with a privacy notice template or consent template for verification to fill out on your side if you need it.

    Additionally, users have the right to withdraw consent within a reasonable timeframe. To revoke an approval, all they have to do is to send a message to your company’s mailbox about privacy issues or, if necessary, to [email protected]

  • Will my user have to download an app?

    No. Sumsub can be integrated with your website or application.
    We provide several options for the most simple and convenient integration process:
    • Web SDK
    • Mobile SDK
    • API
    You can also generate verification links right from the dashboard and share them with users. No integration is needed for this.
    Additionally, you can use Sumsub’s app to offer your users smooth verification on mobile devices, but you can’t use your own app.

    To learn more about each integration type, please refer to this article.

  • How do you establish liveness during verification?

    We use in-house iBeta compliant liveness technology based on AI. The neural network creates 3D FaceMaps to ensure that the live person is presented in front of the camera.

    To learn more about our liveness detection technology, please refer to our website.

  • Do I get a full audit trail?

    Yes, you can view the full audit trail in your dashboard if you have the corresponding permissions.

  • Can your product be used by AML obliged entities?

    Yes, it can. As part of our AML screening procedure, we monitor thousands of global lists on fitness & probity and global & national sanctions, including OFAC, UN, HMT, EU, DFAT and many more from around the world - all in real time. We use an adjustable fuzzy-matching algorithm to reduce the number of false positives while maintaining precision.

    To learn more about our AML product, please refer to our website.

  • Do you check for Politically Exposed Persons and individuals from high-risk jurisdictions?

    Yes, we do. We monitor thousands of global lists on fitness & probity and global & national sanctions, including OFAC, UN, HMT, EU, DFAT and many more from around the world — all in real time.
    We use an adjustable fuzzy-matching algorithm to reduce the number of false positives while maintaining precision.
    The PEP list check is automated and does not imply any final compliance decision as to whether to onboard the user or not; such a decision is to be made in line with internal procedures of your company such as risk assessment, AML/CFT Policy, etc. The result of the check is only based on the list of potential matches between the user’s personal data and the data contained in databases available to the Service Provider.

    To learn more about our AML product, please refer to our website.

  • Do you offer watchlist screening?

    Yes, we do. Sumsub quickly identifies persons associated with criminal activity or those prohibited from certain industries and activities. We scan thousands of lists on fitness & probity and global & national sanctions including OFAC, HMT, UN, and many more -- all in real time. We also utilize a fuzzy-matching algorithm to reduce false positives. For more information, please refer to this page.

  • How can I cost-effectively re-verify customers against watchlists to fulfill recurring AML due diligence requirements?

    You can easily check customers against watchlists with Sumsub’s ongoing AML monitoring. The system will automatically look for potential watchlist matches and notify you accordingly.

  • What happens if a user faces any difficulties during verification?

    In most cases, we send a notification to your user explaining the issue, with instructions on how to solve it before the verification is completed.
    This ensures the highest conversion rate.
    However, users showing clear fraud attempts are not given a second chance.

  • How can I receive verification results?

    The results are reported to you in the form of a user status (approved/declined/requires action) and explanatory comments.
    All the user data is stored in our customer lifecycle management platform, so compliance officers and support can always check it with a single click. In the case of any investigation being needed, you can manually review user profiles and all uploaded images and video. You can also receive this information via webhooks or through API.
    Request a free demo to learn more about the applicant review process.

Integration

  • Can Sumsub be integrated with my website/app?

    We provide several options for the most simple and convenient integration process:
    •Web SDK
    •Mobile SDK (Android, iOS, Flutter, Cordova, React Native)
    •API
    You can also generate verification links right from the dashboard and share them with users. No integration is needed for this.

    Additionally, you can use Sumsub’s app to offer your users smooth verification on mobile devices, but you can’t use your own app.
    To learn more about each integration type, please refer to this article. Documentation for all integration types is available at our Developers Hub. You can access it via this link.

  • Where can I find your API documentation?

    You can access it via this link.

  • Can data be hosted on our servers?

    To keep your user data secure and ensure compliance, Sumsub is not offering to store data on your side. We store user data in an encrypted format on GDPR-compliant Amazon servers, which are located in the EU.

    Please refer to this page to see the whole list of AWS data center locations, where your data can be stored.

    If you prefer to use another compatible data storage for a particular country, our sales representative can offer you a custom solution.
    To learn more about Sumsub data security and compliance standards, please refer to this article.

  • Where can I find integration documentation?

    Documentation for all integration types is available at our Developers Hub. You can access it via this link.

  • Do you have a sandbox environment?

    Yes, we do. You can tailor your verification process and fully test it before going live.

  • How can I get access to your API?

    To access Sumsub’s API, you need to implement the integration. This usually requires some assistance from our technicians.
    To learn more about integration phases, please refer to this article.
    To learn more about data exchange, please refer to this article.

  • How long does integration take?

    The Sumsub-related part of integration can be completed in less than 1 hour. The final integration depends on your infrastructure and code base, but usually, our clients go live in 1-7 days after receiving access to our system.

    Please note that the API integration is more complex and needs more time.
    For more information about integration, please refer to our Developers Hub.

Compliance

  • Do you have any compliance certification?

    We undergo regular audits and have an ISO 27 001 certificate, as well as a Compliance Control Payment Card Industry Data Security Standard (PCI DSS) attestation of compliance as a ‘Service Provider’ and ISO/IEC 30 107-3 by iBeta. For more information, please refer to this page.

  • Are you GDPR compliant?

    We have established a comprehensive, ongoing GDPR compliance program that includes staff training. For more information, please refer to this page.

  • Are you in compliance with my country's AML laws?

    Our system is based on the basic requirements of AML / CFT regulation such as FATF, FINMA, FCA, CySEC, MAS. Depending on your personal law and risk assessment, the flow can be customized. For more information, please refer to this page.

  • Do you sell data?

    No. We observe GDPR and similar local legislation. For more information, please refer to this page.

  • Do you provide access to previously completed verifications?

    To give you more control over your Sumsub account and its sensitive data, we have a functionality for creating custom roles that determine user permissions. You can use the automatically created roles such as Administrator, Compliance Officer, and Developer, or create your own specifying permissions (e.g. reviewing or editing applicant data) in accordance with your risk policy.

  • Who has access to my data?

    The access to personal data processed in the system is strictly regulated. Each employee is provided with a level of access that is objectively necessary for the performance of his/her official duties in line with the staffing table. The Sub-processors or other recipients (in the case of ‘Reusable KYC’) to which personal data may be disclosed implement appropriate technical and organisational measures to ensure data safety.

Pricing

  • What is the price range?

    The price for a verification starts from $1.42, with a monthly commitment of $79. You can see detailed pricing here.

    If you have over 1000 verifications/month, or require a fully customized solution, we’re happy to work out a special pricing plan.

  • Do you offer individual pricing for specific volumes?

    Yes, we do. If you verify over 1000 users/month or require a fully customized solution, we’re happy to work out a special pricing plan.

  • What payment methods are supported?

    We accept invoices, credit cards, and bank transfers.

  • Can I cancel my account?

    Yes. To do so, please contact our support team at [email protected]

Company

  • Where is your office located?

    We have offices in the UK (London), Cyprus (Nicosia), Germany (Berlin), Miami (USA).
    To learn more about the company, please refer to this page.

  • Who are you?

    We are a compliance and anti-fraud ecosystem offering KYC/AML, identity verification, document verification, payment verification, and age verification services for fintech, trading, gaming, and transportation companies, marketplaces and other regulated entities. To learn more about the company, please refer to this page.

  • Which industries do you offer services to?

    We help with compliance and anti-fraud tasks for fintech, trading, gaming, transportation companies, marketplaces, and other regulated and non-regulated entities.

  • When was Sumsub founded?

    Sumsub was founded in 2015. Today, the company is helping over 1000 clients worldwide to stay compliant and protected from the most advanced fraud attacks.
    Learn more