Aye Verify — Biometric Identity Verification API

The Problem

Identity fraud is winning — because verification is still broken.

Passwords are stolen in bulk. SMS codes are intercepted or SIM-swapped. Selfie-based checks can be defeated with freely available tools. Most platforms verify once at login — and never again.

The result: stolen accounts, fraudulent transactions, and multi-million dollar regulatory penalties. The financial system needs a fundamentally different answer.

$48B+

Annual identity fraud losses globally — growing every year

81%

Of enterprise data breaches involve compromised credentials

3×

Growth in AI-generated identity attacks since 2022

Our Solution

Three biometric layers.
One API call.

Aye Verify doesn't just verify at login. It builds a continuous, living identity profile for every user — and monitors it in real time throughout each session.

Face Biometrics

Enterprise-grade facial recognition with active liveness detection. Confirms the right person is present at enrollment, re-login, and step-up authorization — with anti-spoofing built in.

Voice Biometrics

Voiceprint and speaking-cadence fingerprinting captures the unique signature of how a person speaks — not just what they say. Used for continuous authentication and AI-powered account recovery.

Behavioral Intelligence

Passive, continuous signals that don't interrupt user experience. A behavioral baseline is built per user and per device — any meaningful deviation triggers an immediate risk event.

Why Aye Verify

Built different,
from the ground up.

Existing tools check a single signal at a single moment. We check three — continuously. Because identity isn't an event, it's a state.

Continuous, not one-shot

Most platforms gate identity at login and walk away. Aye Verify watches every session — surfacing anomalies the moment a user's pattern shifts. Real-time risk, not post-breach detection.

Multi-modal by design

A fraudster who defeats face recognition still faces voice biometrics and behavioral signals. Three independent modalities create a system exponentially harder to spoof than any single check.

IVY — AI voice recovery

When users lose access, IVY — our conversational AI voice agent — handles recovery end-to-end. It re-verifies identity through voice biometrics in real time. No human support queue required.

Developer-first API

Clean REST API, JavaScript SDK, complete documentation. Engineering teams integrate biometric verification in hours — not weeks. We handle the infrastructure. You ship your product.

Zero passwords. Ever.

Passwords are the single largest attack surface in enterprise security — and also the single biggest source of user friction. Aye Verify replaces them entirely. Your users authenticate with their face, voice, and behavioral pattern. No password to create, forget, reuse, or steal. No reset flows. No phishing vectors. Identity infrastructure the way it should have been built from the start.

password: ••••••••

81%

of breaches start with
a stolen credential

Market Opportunity

A $48 billion problem.
A $30 billion market. Right now.

Identity fraud is the fastest-growing financial crime on the planet. Regulation is tightening. AI-generated attacks are accelerating. The window to own the identity infrastructure layer is open — and closing fast.

$48B+

Annual identity fraud losses globally — growing at double-digit rates year over year

$14B→$30B

Global identity verification market 2024 to 2030 — ~14% CAGR

>80%

Of enterprise data breaches involve compromised or stolen identity credentials

Sources: Javelin Strategy, Verified Market Research, Verizon DBIR.

Why Now

Four forces converging at once.

We did not create the demand for biometric identity infrastructure. Regulation, fraud, and technology evolution did. We built the solution at the right moment.

Regulatory pressure intensifying

GDPR, PSD2, AML directives, and the upcoming EU AI Act require verifiable, auditable identity across banking and digital services. Non-compliance penalties reach tens of millions.

AI makes old verification obsolete

Synthetic voices and deepfake video now defeat photo-based KYC at scale. Multi-modal biometrics — especially behavioral signals — remain highly resistant to generative AI spoofing.

Digital-first banking demands remote identity

Neobanks and digital-first financial platforms have no branch network. Biometric remote verification is the only path to compliant, scalable customer onboarding.

Password era is ending

FIDO2 and WebAuthn are replacing passwords across every major platform. The next layer — biometric-backed passkeys with behavioral context — is exactly what Aye Verify delivers.

Who We Serve

Built for the industries
that can't get identity wrong.

Identity fraud hits hardest where the stakes are highest — regulated industries face both massive financial losses and compliance consequences.

Banks & Financial Services

Meet KYC and AML requirements with biometric proof of identity. Secure account opening, transaction authorization, and step-up authentication — in a single API integration.

FinTech Platforms

Replace friction-heavy login flows with seamless biometric authentication. Cut fraud rates without sacrificing conversion. Start with the free sandbox tier — scale on usage as you grow.

Government & Public Sector

Verify citizen identity for digital services, benefits access, and secure e-government platforms. Built to data protection standards with full GDPR erasure compliance.

For Developers

One call.
Complete identity.

Send a frame. Get a trust decision. Aye Verify handles biometric analysis, risk scoring, and session state — your integration stays clean.

✓REST API with full OpenAPI specification
✓JavaScript SDK — drop-in, minimal code
✓Real-time risk event webhooks
✓Sandbox mode — free, no credit card
✓Per-key rate limiting & usage dashboard
✓GDPR-compliant data export and erasure

Get API Access

api.aye-verify.com

# POST a biometric verification request
curl -X POST https://api.aye-verify.com/verify/face \
  -H "Authorization: Bearer ak_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "user_id":  "usr_abc123",
    "image":    "<base64_frame>",
    "session":  "ses_xyz789"
  }'

# Response — in under 2 seconds
{
  "match":       true,
  "confidence":  0.994,
  "liveness":    "passed",
  "risk_score":  0.02,
  "action":      "allow"
}

Pricing

Simple pricing.
Built for scale.

A flat monthly platform fee gives you full API access. Usage is billed separately — pay only for what you use.

Starter

^$199_/mo

Pilots & early-stage products

✓Full API access
✓Face + voice biometrics
✓Multi-device passkeys
✓IVY voice recovery
✓Usage dashboard
✓99.9% uptime SLA

Get Started

Built. Deployed. Ready.

We are not a slide deck. The API is live on production infrastructure. Here is exactly where we stand.

API live on AWS

Production deployment on cloud infrastructure. Accepting real requests today.

Three biometric layers

Face recognition, voice biometrics, and behavioral intelligence — all built and deployed.

Billing system live

End-to-end payment infrastructure running. Plans and API key management fully operational.

GDPR compliance implemented

Right to access and right to erasure are live endpoints — not promises.

JS SDK v2.0 released

Client-side behavioral signal collection ready to drop into any web application.

First enterprise client

Currently onboarding. Pilot agreements in active conversations.

Security & Compliance

Built for regulated industries
from day one.

When you process biometric PII, you need a vendor you can trust. Here is what we have in place today.

TLS encryption in transit

All API traffic is encrypted end-to-end. No plain-text data ever leaves your server or ours.

GDPR compliant

Right to access (Art. 15) and right to erasure (Art. 17) are implemented and live — not planned.

Cloud infrastructure

Hosted on enterprise-grade cloud infrastructure with encrypted data at rest. No biometric raw media retained after processing.

Per-key rate limiting

Every API key has its own request quota enforced in real time. Abuse is blocked before it reaches your data.

⚠ We are not yet SOC 2 certified — we will be transparent about that. SOC 2 Type I audit is in our roadmap for 2026. If your compliance team needs to review our security posture in the meantime, reach out directly.

Team

The people building it.

Based in Toronto, Canada. Founded, designed, built, and deployed by a team that has done it before — and knows what regulated industries actually need.

Niv Gottfried

CEO & Co-Founder

Business strategy, commercial partnerships, go-to-market execution, and enterprise sales in regulated industries.

Roni Chen

CTO & Co-Founder

System architecture, security engineering, biometric pipeline design, and full-stack product development.

Liron Matus

Head of Product

Product strategy, user experience design, and translating enterprise requirements into a product roadmap that ships.

Advisors

ADVISOR

Nir Ben David

Chief Strategic Advisor

Strategic advisory across enterprise go-to-market, regulated markets, and company building.

ADVISOR

Eyal Shachen

Technology & Security Advisor

Deep expertise in enterprise security architecture, infrastructure design, and technology due diligence.

FAQ

Questions we hear
in every first meeting.

How long does integration actually take?

For a standard REST integration: days, not months. We provide a JavaScript SDK for behavioral signals and clear API documentation. Most developers can run their first verification within a few hours of receiving an API key. We support the onboarding process directly.

Where is our users' biometric data stored?

Biometric data is stored as mathematical representations — not raw images or audio recordings. All data is hosted on encrypted, enterprise-grade cloud infrastructure. Users can request full export or permanent deletion of their data at any time (GDPR Art. 15 & 17).

What happens when the system flags a false positive?

Every verification returns a structured confidence score, not just a pass/fail result. Your team sets the decision threshold and controls the override process. We do not make the final access decision — you do.

Are you SOC 2 certified?

Not yet — we say this plainly. SOC 2 Type I is on our 2026 roadmap. Today we are GDPR compliant with implemented data rights, TLS encryption, and access controls. If your compliance team needs a security review before then, contact us and we will make it work.

Do you offer a pilot before we commit?

Yes. We prefer it. Request a demo and we will set up a controlled pilot environment where you can run real verifications against your test users before signing anything.

Stop Verifying.Start Knowing.