Documentation

Getting Started

Step 1: Create an Account

Sign up at IdentiStride Dashboard and complete the onboarding flow. You'll receive 10 free welcome credits to test the service.

Step 2: Get Your API Key

Navigate to your dashboard and generate an API key. Keep this secure - it's shown only once!

Step 3: Install the SDK

Install our verification component via npm:

Step 4: Create a Backend Endpoint

Create an API route in your backend to generate verification sessions:

// Backend API route (e.g., /api/create-session)
// ⚠️ NEVER expose your secret key in client code!

const response = await fetch("https://api.identistride.com/v1/sessions", {
  method: "POST",
  headers: {
    "X-Api-Key": process.env.IDENTISTRIDE_SECRET_KEY,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    externalId: "user_123", // Your user's ID
  }),
});

const session = await response.json();
return session;

Step 5: Use the Component

Pass the session to the verification component in your frontend:

import { VerificationFlow } from "@identistride/verify";
import { useState, useEffect } from "react";

function VerifyPage() {
  const [session, setSession] = useState(null);

  // Create session on mount
  useEffect(() => {
    fetch("/api/create-session", { method: "POST" })
      .then((res) => res.json())
      .then(setSession);
  }, []);

  return (
    <VerificationFlow
      session={session}
      onComplete={(result) => {
        if (result.outcome === 'approved') {
          console.log("User verified successfully!");
          // Redirect to success page or update UI
        }
      }}
      onError={(error) => {
        console.error("Verification error:", error);
        // Handle error
      }}
    />
  );
}

API Reference

{
  "externalId": "user_123"  // Your user's unique ID
}

{
  "sessionId": "sess_abc123...",
  "verificationId": "ver_xyz789...",
  "externalId": "user_123",
  "status": "pending_upload",
  "uploadUrls": {
    "documentFront": "https://...",
    "documentBack": "https://..."
  },
  "message": "Session created successfully"
}

{
  "sessionId": "sess_abc123...",
  "verificationId": "ver_xyz789...",
  "externalId": "user_123",
  "status": "completed",
  "result": {
    "outcome": "approved",  // approved | rejected | needs_review
    "fraudScore": 12,
    "riskLevel": "LOW",     // VERY_LOW | LOW | MEDIUM | HIGH
    "documentQuality": 95,
    "validations": {
      "hasExpiration": true,
      "isNotExpired": true,
      "isAdult": true,
      "highConfidence": true
    }
  },
  "completedAt": 1697654321000
}

Security & Compliance

Data Processing

• All verification data is processed in real-time and immediately discarded
• Biometric templates are never written to disk
• Document images are deleted after extraction
• Only anonymized verification results are retained (90 days)

Encryption

• All data in transit is encrypted with TLS 1.3
• API keys are hashed and stored securely
• Upload URLs use pre-signed S3 URLs with 15-minute expiration

Compliance

• GDPR Compliant: Full data subject rights support
• CCPA Compliant: California privacy law adherence
• PIPEDA Compliant: Canadian privacy standards
• SOC 2 Type II: (In progress)

Best Practices

• Never expose your API key in client-side code
• Always create sessions from your backend
• Use environment variables for API keys
• Implement rate limiting on your session creation endpoint
• Monitor your API usage in the dashboard
• Rotate API keys periodically

Support