Question 1

What does Onfido (Entrust) do?

Accepted Answer

Onfido is an enterprise identity verification platform that combines AI-powered document verification, biometric face authentication, and AML watchlist screening into a single developer API. Founded in 2012 in London and acquired by Entrust in April 2024, Onfido continues to operate under its own brand within the Entrust portfolio. The platform serves thousands of businesses globally including Revolut, Zipcar, Bitstamp, and numerous regulated financial institutions. Onfido processes hundreds of millions of identity checks annually across 195+ countries.

## What the API Does

Onfido's verification stack has three primary layers. The first is document verification — automated analysis of government-issued ID documents including passports, national ID cards, driver's licenses, and residence permits. Onfido's AI engine validates document authenticity by checking security features, analyzing MRZ (Machine Readable Zone) data, detecting tampering or manipulation, and comparing document templates against its global library.

The second layer is biometric verification — a selfie-based face match comparing the live user's face against the document photo. Onfido supports both passive liveness (background analysis without user prompts) and active liveness (guided motion challenges to confirm presence). The liveness engine is designed to prevent spoofing via printed photos, replay videos, 3D masks, and increasingly, AI-generated deepfake imagery.

The third layer is watchlist screening — automatic checks against global AML (Anti-Money Laundering) databases, PEP (Politically Exposed Persons) lists, and sanctions registries including OFAC, EU, UN, and UK Treasury. For Nigerian users, the platform supports NIN slips, voter cards, international passports (e-passport with NFC), and Federal Road Safety Corps driver's licenses.

Onfido Studio ties these together as a no-code workflow builder — compliance and product teams can drag and drop verification steps, configure conditional logic (e.g., run database check if document is expired), set retry limits, and deploy new verification flows without engineering involvement.

## How Developers Use It

Developers integrate Onfido via REST API and SDKs for Web, iOS, Android, and React Native. The standard integration pattern:

1. Create an applicant server-side using `POST /v3.6/applicants` — this creates a user object in Onfido with name and email.
2. Generate an SDK token using `POST /v3.6/sdk_token` — this short-lived token authorizes the client-side SDK session.
3. Initialize the Onfido Web SDK or Mobile SDK on the client, passing the SDK token.
4. The user is guided through document capture and selfie/liveness steps in the Onfido-hosted UI.
5. Create a check on your server using `POST /v3.6/checks` specifying which reports to run (document, facial_similarity, watchlist, etc.).
6. Receive results via webhook when the check completes, or poll `GET /v3.6/checks/{check_id}`.

## Pricing & Fees

Onfido operates on custom enterprise pricing. Industry data suggests median annual spend of approximately $60,475, with a wide range from $6,156 for smaller integrations to over $945,000 for high-volume enterprise deployments. Charges are per verification check — document verification, biometric checks, and add-ons like AML screening are priced separately. There is no public per-check rate card; pricing is negotiated based on volume and use case. A sandbox environment is provided to all registered developers during the sales process for full integration testing.

## Authentication

Onfido uses JWT (JSON Web Token) authentication. Backend API calls use a long-lived API token stored as a Bearer token in the Authorization header. Client-side SDK sessions use short-lived SDK tokens generated server-side via the `/sdk_token` endpoint — these expire after a configurable period to prevent session hijacking. Webhook payloads include an `X-SHA2-Signature` header for payload verification.

## Rate Limits

Onfido does not publish public rate limits. Enterprise contracts specify throughput limits based on expected volume. The API is designed to handle burst verification loads. Contact Onfido/Entrust sales for specific rate limit commitments in your contract.

## Compliance & Regulations

Onfido holds ISO 27001 certification, SOC 2 Type II attestation, PCI DSS compliance, and full GDPR compliance. The platform supports compliance with FATF anti-money laundering recommendations, UK FCA guidelines, EU AMLD5/6, FinCEN in the US, and CBN KYC requirements in Nigeria. For Nigerian financial institutions, Onfido's document + biometric verification stack satisfies CBN Tier 2 and Tier 3 KYC requirements as outlined in the CBN Customer Due Diligence Regulation 2023.

## Challenges & Gotchas for Nigerian Developers

1. **No self-serve signup**: Onfido requires enterprise onboarding through their sales team. There is no instant-activation self-serve plan — budget 2–4 weeks for contract and credential setup.
2. **USD-only billing**: All pricing is in USD. Nigerian developers need a USD-capable payment method for invoicing.
3. **No native BVN integration**: Onfido does not query the NIBSS BVN database directly. Pair with a Nigerian BVN API for BVN-based verification.
4. **SDK version management**: Onfido releases frequent SDK updates, especially for mobile. Lock your SDK version and test upgrades before deploying to production.
5. **NDPR considerations**: Biometric data processed by Onfido falls under NDPR as sensitive personal data. Ensure your data processing agreement with Onfido covers Nigerian user data handling and retention policies.
6. **Post-Entrust acquisition uncertainty**: Some developers have noted pricing changes following the Entrust acquisition. Negotiate carefully and review renewal terms.

## Company Background

Onfido was founded in 2012 by Husayn Kassai, Eamon Jubbawy, and Ruhul Amin — three Oxford University graduates. The company raised over $200 million in VC funding before being acquired by Entrust, a digital security company, in April 2024 for a reported $400 million. Onfido's technology is now part of Entrust's broader digital identity portfolio, which includes certificates, credentialing, and authentication products.

## Frequently Asked Questions

**Q: Is Onfido available in Nigeria?**
A: Yes. Onfido supports Nigerian government IDs including international passports, NIN slips, voter cards, and driver's licenses as part of their global document library covering 195+ countries.

**Q: Has anything changed since the Entrust acquisition?**
A: The Onfido API, documentation, and brand continue to operate independently. The main changes are in sales and enterprise support structure, which is now routed through Entrust channels.

**Q: Can I use Onfido for KYB (business verification)?**
A: Onfido focuses on individual KYC (Know Your Customer) verification. KYB (Know Your Business / corporate verification) is not a core Onfido product — consider Sumsub or Jumio for KYB requirements.

**Q: How do I get started without a sales call?**
A: Contact Onfido through onfido.com to initiate enterprise onboarding. There is no self-serve option.

Question 2

How much does Onfido (Entrust) cost?

Accepted Answer

Onfido (Entrust) is a paid API. Custom quote-based pricing. Median annual spend ~$60,475 (range $6,156–$945,900). Per-check fees for document verification, biometric checks, and fraud add-ons. Acquired by Entrust in April 2024.

Question 3

How do I authenticate with the Onfido (Entrust) API?

Accepted Answer

JWT (JSON Web Token) — server-side API token for backend requests; short-lived SDK token for client-side SDK sessions

Question 4

Is there a rate limit on Onfido (Entrust)?

Accepted Answer

Enterprise-negotiated. No public rate limit documentation. Contact Onfido/Entrust sales for specifics.

Question 5

Does Onfido (Entrust) offer a sandbox or test mode?

Accepted Answer

Yes — Onfido (Entrust) provides a sandbox or test environment so you can integrate and test before going live.

Question 6

What is Onfido (Entrust) best suited for?

Accepted Answer

Nigerian fintechs, regulated digital banks, and compliance teams that need enterprise document verification and biometric KYC with a no-code workflow builder (Onfido Studio) and global document coverage.

Question 7

Is there anything else I should know before integrating Onfido (Entrust)?

Accepted Answer

Onfido was acquired by Entrust in April 2024 and now operates as Entrust IDV. The Onfido brand and API continue under Entrust. Nigerian NIN, voter card, international passport, and driver's license are supported. Requires enterprise onboarding — no self-serve signup available.

Question 8

Where can I find Onfido (Entrust)'s documentation?

Accepted Answer

The official API documentation is at https://documentation.identity.entrust.com/. The provider's website is https://onfido.com.

Question 9

Does Onfido (Entrust) support Nigerian developers?

Accepted Answer

Yes — Onfido (Entrust) explicitly supports Nigerian developers/use cases.

Onfido (Entrust)

Features Included

Not Supported

Key Highlights

Required Access Documents

Use Cases

Ask question or give feedback

Sign in to participate

Discover similar API's

Ask question or give feedback

Sign in to participate