Ruka hadi maudhui makuu
Didit Yakusanya $7.5M Kujenga Miundombinu ya Utambulisho na Udanganyifu
Didit
Digital ID wallets

Waruhusu watu waingie na
kitambulisho walicho nacho tayari.

Thibitisha watu kwa utambulisho wa kielektroniki (eID) wanaoutumia tayari. Kubali MitID, BankID Uswidi, Finnish Trust Network, Smart-ID na Mobile-ID katika mtiririko mmoja, na hati kama mbadala inapohitajika.

Inaungwa mkono na
Y CombinatorRobinhood Ventures
Firecrawl
Slash
Crnogorski Telekom
UCSF Neuroscape
Bit2Me

Inaaminika na mashirika 3,000+ duniani kote.

  • MitIDDenmark · Danish Agency for Digital GovernmentDenmarkMoja kwa moja
  • BankIDSweden · Finansiell ID-Teknik / bank consortiumSwedenMoja kwa moja
  • BankIDNorway · BankID BankAxept ASNorwayHivi karibuni
  • VippsNorway · Vipps MobilePay / BankID NONorwayHivi karibuni
  • Buypass IDNorway · Buypass ASNorwayHivi karibuni
  • itsmeBelgium, Luxembourg, Netherlands · Belgian Mobile IDBelgiumLuxembourgNetherlandsHivi karibuni
  • iDINNetherlands · Dutch banks (Currence iDIN)NetherlandsHivi karibuni
  • Finnish Trust NetworkFinland · Finnish banks and mobile operators (FTN)FinlandMoja kwa moja
  • PersonalausweisGermany · Bundesministerium des Innern (eID)GermanyHivi karibuni
  • Freja eIDSweden · Freja eID GroupSwedenHivi karibuni
  • UAE PASSUnited Arab Emirates · UAE Digital Government AuthorityUnited Arab EmiratesHivi karibuni
  • gov.brBrazil · Governo Federal do BrasilBrazilHivi karibuni
  • OneIDUnited Kingdom · OneID (UK bank-verified identity)United KingdomHivi karibuni
  • GOV.UK WalletUnited Kingdom · UK Government Digital ServiceUnited KingdomHivi karibuni
  • Smart-IDEstonia, Latvia, Lithuania, Belgium · SK ID SolutionsEstoniaLatviaLithuaniaBelgiumMoja kwa moja
  • Mobile-IDEstonia, Lithuania · SK ID Solutions with the national mobile operatorsEstoniaLithuaniaMoja kwa moja
  • Bank iDCzechia · Bankovní identita, a.s.CzechiaHivi karibuni
  • MojeIDCzechia · CZ.NICCzechiaHivi karibuni
  • DiiaUkraine · Ministry of Digital Transformation of UkraineUkraineHivi karibuni
  • FranceConnectFrance · DINUM (French state)FranceHivi karibuni
  • AuðkenniIceland · Auðkenni (Icelandic electronic ID)IcelandHivi karibuni
  • ConnectIDAustralia · Australian Payments PlusAustraliaHivi karibuni
  • EUDI WalletNchi 30 za EU na EEA · The user's own member state; the issuer differs per countryAustriaBelgiumBulgariaCroatia+26Hivi karibuni

Hali hutofautisha upatikanaji wa uzalishaji na upimaji wa ujumuishaji. Ufunikaji wa nchi unaelezea njia ya wallet iliyosanidiwa, si ukaguzi wa utambulisho wa moja kwa moja uliokamilika katika kila nchi. Hakuna tarehe ya uzinduzi iliyoahidiwa.

Hali ya ujumuishaji

Digital ID wallets.
Hali wazi ya uzinduzi.

MitID, BankID Uswidi, Finnish Trust Network, Smart-ID na Mobile-ID zinapatikana. Chagua wallet zinazokubaliwa kwa kila nchi na uwaruhusu watumiaji wajithibitishe kwa utambulisho unaostahili walio nao tayari. Miunganisho mingine iliyoorodheshwa inakuja hivi karibuni.

Jinsi inavyofanya kazi

Kutoka kuingia kwa wallet hadi mtumiaji aliyethibitishwa kwa hatua nne.

Hatua 01 / 04

Unda mtiririko wa kazi

Katika console, chagua wallet zinazopatikana kwa kila nchi katika mazingira yako. Chagua kama kuingia kulikoghairiwa au kushindwa kutaangukia kwenye kunasa hati au kukataa.

Imejengwa kwa ajili ya watengenezaji · Imejengwa dhidi ya udanganyifu · Wazi kwa muundo

Uwezo sita. Orodha moja ya kukubali kwa kila nchi.

Wallet ni njia mojawapo ndani ya Uthibitishaji wa Kitambulisho, kwenye mkataba wa matokeo sawa na upigaji picha wa hati. Kinachobadilika ni ushahidi: saini kutoka kwa mtoaji badala ya picha.
01 · Katalogi

Kubali wallet ambazo nchi inatumia.

Ona kila wallet, nchi zinazohudumiwa, mamlaka inayotoa na upatikanaji kwa pamoja. MitID, BankID Uswidi, Finnish Trust Network, Smart-ID na Mobile-ID zinapatikana; miunganisho iliyopangwa imewekwa alama wazi kuwa Inakuja hivi karibuni.
02 · Orodha ya kukubali

Chagua unachokubali. Mtumiaji anachagua.

Chagua wallet zipi zinazopatikana za kukubali kwa kila nchi katika workflow yako. Mtumiaji huchagua kutoka seti hiyo. Wallet iliyoorodheshwa kama inakuja hivi karibuni haiwezi kuwezeshwa hadi katalogi katika mazingira yako iionyeshe kuwa inapatikana.
03 · Kukabidhi

Linganisha msimbo. Idhinisha kwenye simu yako.

Smart-ID hutumia msimbo wako wa kibinafsi; Mobile-ID pia huomba nambari yako ya simu. Didit huonyesha msimbo wa kulinganisha wakati unakubali ombi kwenye kifaa chako. PIN yako haijaingizwa kamwe kwenye Didit. Kughairi na kushindwa hufuata mpangilio wako wa fallback wa workflow.
04 · Sifa zilizosainiwa

Soma sifa ambazo mtoaji alizisaini.

Jina, tarehe ya kuzaliwa na kitambulisho cha kitaifa ambacho wallet inafichua, pamoja na uthibitisho uliosainiwa wenyewe. Ondoa tiki kwenye sifa yoyote ya hiari usiyotaka ihifadhiwe na haitaandikwa kwenye session.
05 · Uhakikisho

Fikia viwango vya juu zaidi vya uhakikisho vitatu.

Hati inakupa uhakikisho wa hati. Utafutaji wa rejista unakupa data inayolingana. Wallet inakupa uhakikisho wa kriptografia, kwa sababu mtoaji alisaini sifa na Didit inakagua saini hiyo.
06 · Ufikiaji

Nchi zinazohudumiwa na kila wallet iliyo hai.

Kubali MitID nchini Denmark, BankID nchini Uswidi, Finnish Trust Network nchini Ufini, Smart-ID nchini Estonia, Latvia, Lithuania na Ubelgiji, na Mobile-ID nchini Estonia na Lithuania. Watumiaji hujithibitisha kwa kitambulisho kinachostahili kwa wallet iliyochaguliwa.
Unganisha

Simu moja nje. Matokeo moja yaliyosainiwa nyuma.

Unda session, mtumie mtumiaji kwake, na thibitisha webhook iliyosainiwa wakati matokeo yanapofika. Wallet ambayo mtumiaji aliingia nayo inarudi kwenye matokeo.
POST /v3/session/Hosted UI
$ curl -X POST https://verification.didit.me/v3/session/ \
  -H "x-api-key: <your-api-key>" \
  -H "Content-Type: application/json" \
  -d '{
    "workflow_id": "<your-workflow-uuid>",
    "vendor_data": "user_42"
  }'
201Imeundwa{ "url": "https://verify.didit.me/..." }
Didit inaonyesha wallets zilizokubaliwa na inasimamia kukabidhi.nyaraka
POST /webhooks/diditWebhook
// Your endpoint receives a signed payload
const crypto = require("node:crypto"); // ESM: import crypto from "node:crypto"
// X-Signature-V2 = HMAC over the canonical JSON, never the raw bytes. Match the sender byte for
// byte: keys sorted by code point, integers digit for digit, floats in Python's repr.
class Num { constructor(src) { this.src = src; } } // a number as written on the wire, not a double
const num = (s) => { if (/^-?\d+$/.test(s)) return BigInt(s).toString(); const n = +s; // ints stay exact
  if (Number.isInteger(n)) return BigInt(n).toString(); const [m, e] = n.toExponential().split("e"); // 27.0 -> 27
  return +e >= -4 ? String(n) : `${m}e-${String(-e).padStart(2, "0")}`; }; // 1e-05, not 0.00001
const byCodePoint = (a, b) => Buffer.compare(Buffer.from(a), Buffer.from(b)); // UTF-8 order = Python's
const canon = (v) => Array.isArray(v) ? `[${v.map(canon)}]` : v instanceof Num ? num(v.src)
  : v && typeof v === "object" ? `{${Object.keys(v).sort(byCodePoint).map((k) => `${JSON.stringify(k)}:${canon(v[k])}`)}}`
  : JSON.stringify(v);
// Read the body as text: express.json() would round 1000000000000000129 to a double first.
// Register this route ABOVE any global app.use(express.json()): the first parser to run
// consumes the stream, and a body it already parsed has lost the digits the signature covers.
app.post("/webhooks/didit", express.text({ type: "application/json" }), (req, res) => {
  const exact = JSON.parse(req.body, (k, v, c) => typeof v === "number" ? new Num(c.source) : v); // Node 21+
  const body = JSON.parse(req.body);
  const mac = crypto.createHmac("sha256", SECRET).update(canon(exact), "utf8").digest("hex");
  const sig = Buffer.from(String(req.headers["x-signature-v2"] ?? ""));
  // Freshness comes from the signed body timestamp; the header alone is unsigned and replayable.
  const ts = body.timestamp, fresh = String(ts) === req.headers["x-timestamp"]
    && Math.abs(Date.now() / 1000 - ts) <= 300;
  if (!fresh || sig.length !== mac.length
    || !crypto.timingSafeEqual(sig, Buffer.from(mac))) return res.sendStatus(401);
  const { status, decision } = body;
  // One entry per ID Verification node; pick yours by node_id when you run several.
  const [idv] = decision?.id_verifications ?? [];
  // idv.verification_method: "document" | "id_lookup" | "wallet"
  res.sendStatus(200);
});
200Sawa{ "verification_method": "wallet", "assurance": "cryptographic" }
Thibitisha saini kabla hujaamini payload.nyaraka
Ujumuishaji tayari kwa agent

Weka sign-in ya wallet kwa prompt moja.

Bandika block iliyo hapa chini kwenye Claude Code, Cursor, Codex, Devin, Aider, au Replit Agent. Jaza kishika nafasi cha my_stack na framework yako, lugha na kesi ya matumizi. Agent inatoa Didit, inakubali wallets kwa kila nchi, inaunganisha webhook, na inasafirisha.
didit-integration-prompt.md
# Didit digital ID wallets — integrate in 5 minutes

You are adding digital ID wallet sign-in to my_stack. The user signs in with a
government or bank digital identity and the wallet returns signed attributes.
Every URL, header, and enum value below is canonical — do not paraphrase or
"improve" them.

## 1. Provision an account
- Sign up: https://business.didit.me (no credit card required).
- Grab the API key for your application from the console.

## 2. Read the methods catalog first
Wallet availability is server-driven per country. Never hard-code a wallet list.

Read the catalog one of these ways:
  - Business Console: your application -> Workflows -> the ID Verification
    step -> Countries -> "Wallets accepted". Coming-soon wallets are listed
    but cannot be switched on. https://docs.didit.me/console/id-verification-methods
  - Didit MCP server (https://mcp.didit.me/mcp), tool
    didit_workflow_get_id_verification_methods_catalog; pass country as ISO
    3166-1 alpha-3 to narrow it. The MCP server signs in with "Log in with
    Didit" (OAuth). It does not accept the x-api-key.
    https://docs.didit.me/integration/mcp/tools
  - Public coverage table (no sign-in, read-only):
    https://docs.didit.me/core-technology/id-verification/digital-id-wallets#supported-wallets
If your code holds only an API key, it cannot read the catalog itself: use the
wallet ids listed in this prompt, and treat the answer of the workflow save as
the check. A live application answers 400 for a wallet that is not available
in that country ("<wallet> is not offered in <ISO3>", "unknown wallet").

The catalog gives you, per wallet id: the display name, the countries it
covers, the issuing authority, the level of assurance, the availability state,
and the attributes it returns. When this prompt was generated it marked these
available:
  - MitID: wallet id mitid, country keys DNK
  - BankID: wallet id bankid_se, country keys SWE
  - Finnish Trust Network: wallet id ftn, country keys FIN
  - Smart-ID: wallet id smart_id, country keys EST, LVA, LTU, BEL
  - Mobile-ID: wallet id mobile_id, country keys EST, LTU
Finnish Trust Network has its own integration guide:
https://docs.didit.me/core-technology/id-verification/finnish-trust-network
iDIN and other wallets remain coming soon until the catalog in
your environment marks them available. Check it; do not hard-code a date.

## 3. Create a workflow with the ID Verification (OCR) feature
POST https://verification.didit.me/v3/workflows/
  -H "x-api-key: <your-api-key>"
  -H "Content-Type: application/json"

The ID Verification feature's enum value is OCR (UPPERCASE — strict enum;
there is no ID_VERIFICATION alias and the API rejects it). Wallets are its
wallet method, accepted per country under config.methods on that same
feature entry, in the same request. Keys are ISO 3166-1 alpha-3.

{
  "workflow_label": "Wallet onboarding",
  "features": [
    {
      "feature": "OCR",
      "config": {
        "methods": {
          "DNK": {
            "document": { "enabled": true },
            "wallet": {
              "enabled": true,
              "providers": ["mitid"],
              "on_failure": "fallback_to_document"
            }
          },
          "FIN": {
            "document": { "enabled": true },
            "wallet": {
              "enabled": true,
              "providers": ["ftn"],
              "on_failure": "fallback_to_document"
            }
          }
        }
      }
    }
  ]
}

Response: 201. The workflow id is uuid (workflow_id carries the same value);
the workflow is published straight away. Create it once and keep the id:
every call to this endpoint makes a new workflow.
is_desktop_allowed defaults to false: on a desktop browser the hosted flow
then shows a QR code to continue on a phone. Add "is_desktop_allowed": true
next to workflow_label to let people finish on desktop.
Use that id as workflow_id in step 4. The ID Verification node id of a
workflow made by this call is "ocr".

Rules that the API enforces:
  - providers is an accept-list, not a ranking. Order carries no meaning and
    the end user picks
  - on_failure is either fallback_to_document or decline. It covers all three
    cases: no wallet, cancelled, sign-in failed
  - a wallet id the catalog does not mark available for that country is
    rejected, and the rejection fails the whole save — including any lookup
    configuration next to it. For unavailable wallets, keep wallet.enabled
    false (or omit the wallet block) so the save succeeds. A sandbox
    application accepts coming-soon wallets, so this only shows on live
  - unknown wallet ids already saved on a workflow are preserved untouched, so
    a config written by a newer console version is never silently dropped
  - a country with no method enabled is rejected at publish time

## 4. Create a session
POST https://verification.didit.me/v3/session/
  -H "x-api-key: <your-api-key>"
  -H "Content-Type: application/json"
  -d '{ "workflow_id": "<id from step 3>", "vendor_data": "<your user id>" }'

Response: 201 with session_id, session_token, url and status "Not Started".
Redirect the user to url (hosted flow) or open it in the Web, iOS, Android,
React Native or Flutter SDK. The field is named url on this response.
One unfinished session exists per workflow_id and vendor_data pair: calling
create again with the same pair answers 201 again with that same session.
Didit shows the accepted wallets for the user's country with their brand marks,
hands off to the wallet, and waits for the signed assertion to come back.

## 5. Webhooks
Register a destination in the console (API & Webhooks), or over the API:

POST https://verification.didit.me/v3/webhook/destinations/
  -H "x-api-key: <your-api-key>"
  -H "Content-Type: application/json"
  -d '{
    "label": "Verification webhooks",
    "url": "https://<your-public-host>/webhooks/didit",
    "webhook_version": "v3",
    "subscribed_events": ["status.updated", "data.updated"]
  }'

label, url and subscribed_events are required. url must be a public HTTPS
address: Didit does not deliver to localhost or private addresses. Response:
201 with uuid and secret_shared_key. Store secret_shared_key as the webhook
secret (DIDIT_WEBHOOK_SECRET); it is unique to this destination. Remove a
destination with DELETE /v3/webhook/destinations/{uuid}/ (204).

What arrives:
  - webhook_type is "status.updated" (the session changed status) or
    "data.updated" (verification data was corrected after the fact)
  - a destination receives the events of every session of the application,
    so filter on workflow_id or vendor_data when several flows share it
  - creating a session already sends status.updated with status
    "Not Started". The decision key is present only when status is Approved,
    Declined, In Review or Abandoned.

Verify every delivery:

  Header:      X-Signature-V2   (NOT X-Signature, NOT X-Signature-Simple)
  Algorithm:   HMAC-SHA256, hex digest, over the CANONICAL JSON of the payload
               — the sender's Python json.dumps(sort_keys=True,
               separators=(",", ":"), ensure_ascii=False) after whole-valued
               floats become ints. Reproduce those bytes EXACTLY; do NOT
               "parse, sort keys, JSON.stringify", which fails in four ways:
               numbers come from the wire TEXT, never from parsed doubles
               (read the body with express.text, not express.json(),
               registered ABOVE any global app.use(express.json()), and
               re-emit integers through BigInt(source) — JSON.parse rounds
               1000000000000000129); floats use Python's repr (1e-05, not
               0.00001; 27.0 becomes 27); keys sort by Unicode CODE POINT as
               strings ("10" before "2", U+FF21 before U+1F642, which
               JavaScript's default .sort() reverses); and the bytes come
               straight from the sorted entries, never from a rebuilt object.
               Do NOT hash the raw request bytes — that is the v1
               X-Signature algorithm and fails for V2 whenever whitespace or
               key order differs from the canonical form.
  Freshness:   the signed body field timestamp is the dispatch time (Unix
               seconds, refreshed on every retry). Reject when
               abs(now - timestamp) > 300 seconds, and reject when the
               X-Timestamp header does not equal it. The header is not
               covered by the signature, so it must never be the only replay
               check: a captured delivery replays with just that header
               refreshed.
  Idempotency: event_id is the same on every retry of one event, so store it
               and skip a delivery you already processed. One session can
               still send the same status under two event ids, and the
               console's Try Webhook test deliveries carry no event_id, so
               also make the handler safe to run twice for one
               (session_id, status, webhook_type).
  Compare:     constant-time (crypto.timingSafeEqual)

Reference handler (Express). Keep the verification lines as written.
The handler is a fragment. Put this above it and app.listen(process.env.PORT)
below it. It needs Express and Node 21 or newer (an older Node rejects
every delivery). It expects a JSON body: answer 400 yourself if you accept
anything else on this route, and refuse to start without the secret.

const express = require("express");
const app = express();
const SECRET = process.env.DIDIT_WEBHOOK_SECRET; // secret_shared_key of the destination

// Your endpoint receives a signed payload
const crypto = require("node:crypto"); // ESM: import crypto from "node:crypto"
// X-Signature-V2 = HMAC over the canonical JSON, never the raw bytes. Match the sender byte for
// byte: keys sorted by code point, integers digit for digit, floats in Python's repr.
class Num { constructor(src) { this.src = src; } } // a number as written on the wire, not a double
const num = (s) => { if (/^-?\d+$/.test(s)) return BigInt(s).toString(); const n = +s; // ints stay exact
  if (Number.isInteger(n)) return BigInt(n).toString(); const [m, e] = n.toExponential().split("e"); // 27.0 -> 27
  return +e >= -4 ? String(n) : `${m}e-${String(-e).padStart(2, "0")}`; }; // 1e-05, not 0.00001
const byCodePoint = (a, b) => Buffer.compare(Buffer.from(a), Buffer.from(b)); // UTF-8 order = Python's
const canon = (v) => Array.isArray(v) ? `[${v.map(canon)}]` : v instanceof Num ? num(v.src)
  : v && typeof v === "object" ? `{${Object.keys(v).sort(byCodePoint).map((k) => `${JSON.stringify(k)}:${canon(v[k])}`)}}`
  : JSON.stringify(v);
// Read the body as text: express.json() would round 1000000000000000129 to a double first.
// Register this route ABOVE any global app.use(express.json()): the first parser to run
// consumes the stream, and a body it already parsed has lost the digits the signature covers.
app.post("/webhooks/didit", express.text({ type: "application/json" }), (req, res) => {
  const exact = JSON.parse(req.body, (k, v, c) => typeof v === "number" ? new Num(c.source) : v); // Node 21+
  const body = JSON.parse(req.body);
  const mac = crypto.createHmac("sha256", SECRET).update(canon(exact), "utf8").digest("hex");
  const sig = Buffer.from(String(req.headers["x-signature-v2"] ?? ""));
  // Freshness comes from the signed body timestamp; the header alone is unsigned and replayable.
  const ts = body.timestamp, fresh = String(ts) === req.headers["x-timestamp"]
    && Math.abs(Date.now() / 1000 - ts) <= 300;
  if (!fresh || sig.length !== mac.length
    || !crypto.timingSafeEqual(sig, Buffer.from(mac))) return res.sendStatus(401);
  const { status, decision } = body;
  // One entry per ID Verification node; pick yours by node_id when you run several.
  const [idv] = decision?.id_verifications ?? [];
  // idv.verification_method: "document" | "id_lookup" | "wallet"
  res.sendStatus(200);
});

Body fields you will use: event_id, session_id, status, webhook_type,
workflow_id, vendor_data, timestamp, decision.
Status values (exact strings): Not Started, In Progress, Approved, Declined,
In Review, Resubmitted, Expired, Abandoned, Kyc Expired. Awaiting User only
appears on business verification sessions.

## 6. Reading the result
The same V3 decision reaches you two ways:
  - webhook body: body.decision.id_verifications[]
  - GET https://verification.didit.me/v3/session/{session_id}/decision/
      -H "x-api-key: <your-api-key>"
    This response IS the decision object. Read id_verifications at the top
    level: there is no decision wrapper here.
Until the user finishes the ID step, status is "Not Started" or "In Progress"
and id_verifications is null, not an empty array. Guard for it.

The decision is the V3 shape: every feature result is a plural array with one
entry per workflow node. ID Verification results live in
id_verifications[]: there is no singular kyc (that is the V2 shape) and no
id_verification. The decision's features list names the step
ID_VERIFICATION, while the workflow body takes OCR. Select your entry by node_id (the
id of your ID Verification node in the workflow graph); with a single ID step,
take index 0. Each entry carries, next to the document fields:

  verification_method    "document" | "id_lookup" | "wallet"
  assurance              "documentary" | "data_match" | "cryptographic"
  wallet_provider        the catalog wallet id the user signed in with; null
                         on document and id_lookup entries
  wallet_verification    provider, provider_name, issuing_authority,
                         issuing_country, credential_type, level_of_assurance
                         (low | substantial | high), verified_at,
                         signature_valid, attributes (what the wallet shared),
                         portrait when the wallet shares one; null otherwise
  fallback_from          { method, reason, action } when the wallet sign-in failed
                         and on_failure declined the session; otherwise
                         null. After a document fallback that succeeds the
                         entry reads verification_method "document" with
                         fallback_from null

A wallet entry that succeeds is assurance cryptographic: an identity provider
authenticated the person and signed the attributes. The normalised full_name
and date_of_birth sit on the entry itself; attributes holds the wallet's own
claims. On a live application, check wallet_verification.signature_valid
before you trust attributes.
Field-by-field reference: https://docs.didit.me/reference/data-models#id-verification

## 7. Billing
  - published customer prices in USD per completed wallet verification:
    - MitID personal: $0.25; production availability: Available
    - BankID Sweden: $0.20; production availability: Available
    - Finnish Trust Network: $0.25; production availability: Available
    - Smart-ID: $0.20; production availability: Available
    - Mobile-ID: $0.20; production availability: Available
    - BankID Norway High: $0.35; production availability: Coming soon
    - Vipps Plus: $0.25; production availability: Coming soon
    - Buypass ID: Coming soon; production availability: Coming soon
    - itsme: Coming soon; production availability: Coming soon
    - iDIN full identification: $0.85; production availability: Coming soon
    - Personalausweis Profile 2: $0.45; production availability: Coming soon
    - Freja eID: $0.25; production availability: Coming soon
    - UAE PASS: Coming soon; production availability: Coming soon
    - gov.br: Coming soon; production availability: Coming soon
    - OneID: $2.50; production availability: Coming soon
    - GOV.UK Wallet: Coming soon; production availability: Coming soon
    - Bank iD: Coming soon; production availability: Coming soon
    - MojeID: Coming soon; production availability: Coming soon
    - Diia: Coming soon; production availability: Coming soon
    - FranceConnect: Coming soon; production availability: Coming soon
    - Auðkenni: Coming soon; production availability: Coming soon
    - ConnectID: Coming soon; production availability: Coming soon
    - EUDI Wallet: Coming soon; production availability: Coming soon
    - Estonian ID-card: $0.55; production availability: Coming soon
    - eParaksts mobile: $0.55; production availability: Coming soon
  - an announced price does not enable a wallet; check the live workflow catalog
  - wallet checks are outside the document free tier; other checks are billed separately
  - full pricing: https://docs.didit.me/core-technology/id-verification/digital-id-wallets#pricing
  - document capture bills its own price when the user falls back

## 8. Hard rules — do not change
  - base URL for v3 endpoints: verification.didit.me
  - auth header: x-api-key (lowercase, hyphenated)
  - webhook headers: X-Signature-V2 plus X-Timestamp; canonical JSON, never
    raw bytes; freshness from the signed body timestamp
  - feature enum: OCR (uppercase) — the ID Verification feature; per-country
    methods go under its config.methods
  - method keys: document, id_lookup, wallet (lowercase, snake_case)
  - wallet ids come from the catalog verbatim, lowercase, snake_case
  - country keys: ISO 3166-1 alpha-3, uppercase
  - result path: decision.id_verifications[] in the webhook body and
    id_verifications[] on the GET decision response, never kyc

## 9. Verify your integration
Sandbox (an application in sandbox mode: nothing is billed and no real eID is
called). https://docs.didit.me/integration/sandbox-testing
  - a sandbox application can enable every wallet in the catalog, the
    coming-soon ones included. A workflow that saves in sandbox can still be
    refused on a live application, so only use wallets marked available.
  - open the session url, pick the wallet and confirm: the default approve
    scenario simulates the sign-in. The entry then has verification_method
    "wallet", assurance "cryptographic" and wallet_provider set, and the
    normalised full_name and date_of_birth are filled. But
    wallet_verification.signature_valid and level_of_assurance are null and
    attributes is { "sandbox": true }: no real credential was checked.
    Assert signature_valid === true and the level of assurance only against
    a live application.
  - to exercise on_failure, create the session with
    "sandbox_scenario": "wallet_cancelled" (also wallet_timeout and
    wallet_provider_error). The wallet sign-in then fails and the flow moves
    to document capture or declines, as on_failure says. A fallback that
    ends in an approved document reads verification_method "document".
  - POST /v3/session/{session_id}/simulate/ forces a final status but writes
    no id_verifications entry, so it cannot stand in for a sign-in.

Checks:
  - create the workflow, create a session, and read its decision: expect 201,
    201 with url, and 200 with status "Not Started"
  - run one session per accepted wallet in sandbox through the hosted flow
  - assert the id_verifications[] entry for your node has verification_method
    wallet and wallet_provider set to the wallet you picked
  - run one session with sandbox_scenario "wallet_cancelled" and assert your
    on_failure setting actually fires
  - on a live application, assert wallet_verification.signature_valid is true
  - assert your webhook accepts a correctly signed payload with reordered
    keys, whitespace and integer-like metadata keys ("10" before "2"), and
    rejects a wrong X-Signature-V2, a payload whose signed timestamp is older
    than 300 seconds, and that same stale payload with only the X-Timestamp
    header refreshed

Docs: https://docs.didit.me/integration/integration-prompt
Inatii kwa muundo

Fungua nchi mpya kwa kubofya mara moja. Tunafanya kazi ngumu.

Tunafungua kampuni tanzu za ndani, tunapata leseni, tunafanya majaribio ya kupenya, tunapata vyeti, na tunalingana na kila kanuni mpya. Ili kusafirisha uthibitishaji katika nchi mpya, geuza swichi. Nchi 220+ ziko hewani, zinakaguliwa na kupimwa kila robo mwaka, mtoa huduma pekee wa utambulisho ambaye serikali ya nchi mwanachama wa EU imemwita rasmi kuwa salama zaidi kuliko uthibitishaji wa ana kwa ana.
Soma faili ya usalama na utiifu
SOC 2 · Type II — AICPA · 2026
SOC 2 · Type I — AICPA · 2026
ISO/IEC 27001 — Usalama wa habari · 2026
EU financial sandbox — Tesoro · SEPBLAC · BdE
FIDO Alliance — Mwanachama Mshirika · 2026
iBeta Level 1 PAD — NIST / NIAP · 2026
GDPR — EU 2016/679
HIPAA — 45 CFR §160 · §164
DORA — EU 2022/2554
MiCA — EU 2023/1114
Miongozo ya EBA ya kuingiza wateja mtandaoni — EBA/GL/2022/15
AMLD6 · eIDAS 2.0 — EU-aligned kwa muundo
Jugendschutz geprüft — FSM · JMStV §4(2) · 2026

Namba za uthibitisho

Namba za uthibitisho
  • 23
    Wallets kwenye katalogi ya njia
  • 35
    Nchi kwenye katalogi
  • 10
    Wallets zenye uhakikisho wa juu wa eIDAS
  • $0.15
    Upigaji picha wa hati, wakati mtumiaji anarudi nyuma

Bei na upatikanaji wa Digital ID wallet

Bei zilizo hapa chini ni USD kwa kila uthibitishaji wa pochi uliokamilika. Zinajumuisha bidhaa ya utambulisho iliyotajwa; ukaguzi mwingine wa mtiririko wa kazi na chelezo ya hati hulipwa kando. Ukaguzi 500 wa hati za bure za kila mwezi haujumuishi pochi. Bei iliyotangazwa haimaanishi kuwa pochi inapatikana: upatikanaji unaonyeshwa kando. Pochi zinazopatikana bila bei iliyochapishwa zinaonyesha Ombi; pochi zilizopangwa bila bei iliyochapishwa zinaonyesha Zinakuja hivi karibuni. Pochi za utambulisho huthibitisha watu; uchunguzi wa pochi za crypto ni bidhaa tofauti.

Inapatikana inamaanisha imewezeshwa katika uzalishaji. Inakuja hivi karibuni inamaanisha bado haijaweshwa katika uzalishaji, hata kama majaribio ya kuunganisha yameanza. Wallet zinazopatikana huonekana kwanza.

ConnectID (Australia), Kitambulisho cha Estonia (Estonia) na eParaksts mobile (Latvia) zimeunganishwa kwa majaribio ya sandbox. Angalia jedwali kwa bei iliyochapishwa ya kila wallet na upatikanaji wa uzalishaji.

Soma nyaraka za kina
Bei na upatikanaji wa Digital ID wallet
Pochi ya utambulishoUSD / uthibitishaji uliokamilikaNchi / eneoUpatikanaji wa uzalishaji
MitID personalUS$ 0.25
  • Denmark
Inapatikana
BankID SwedenUS$ 0.20
  • Sweden
Inapatikana
Finnish Trust NetworkUS$ 0.25
  • Finland
Inapatikana
Smart-IDUS$ 0.20
  • Estonia
  • Latvia
  • Lithuania
  • Belgium
Inapatikana
Mobile-IDUS$ 0.20
  • Estonia
  • Lithuania
Inapatikana
BankID Norway HighUS$ 0.35
  • Norway
Inakuja hivi karibuni
Vipps PlusUS$ 0.25
  • Norway
Inakuja hivi karibuni
Buypass IDInakuja hivi karibuni
  • Norway
Inakuja hivi karibuni
itsmeInakuja hivi karibuni
  • Belgium
  • Luxembourg
  • Netherlands
Inakuja hivi karibuni
iDIN full identificationUS$ 0.85
  • Netherlands
Inakuja hivi karibuni
Personalausweis Profile 2US$ 0.45
  • Germany
Inakuja hivi karibuni
Freja eIDUS$ 0.25
  • Sweden
Inakuja hivi karibuni
UAE PASSInakuja hivi karibuni
  • United Arab Emirates
Inakuja hivi karibuni
gov.brInakuja hivi karibuni
  • Brazil
Inakuja hivi karibuni
OneIDUS$ 2.50
  • United Kingdom
Inakuja hivi karibuni
GOV.UK WalletInakuja hivi karibuni
  • United Kingdom
Inakuja hivi karibuni
Bank iDInakuja hivi karibuni
  • Czechia
Inakuja hivi karibuni
MojeIDInakuja hivi karibuni
  • Czechia
Inakuja hivi karibuni
DiiaInakuja hivi karibuni
  • Ukraine
Inakuja hivi karibuni
FranceConnectInakuja hivi karibuni
  • France
Inakuja hivi karibuni
AuðkenniInakuja hivi karibuni
  • Iceland
Inakuja hivi karibuni
ConnectIDInakuja hivi karibuni
  • Australia
Inakuja hivi karibuni
EUDI WalletInakuja hivi karibuni
  • Austria
  • Belgium
  • Bulgaria
  • Croatia
  • Cyprus
  • Czechia
  • Denmark
  • Estonia
  • Finland
  • France
  • Germany
  • Greece
  • Hungary
  • Ireland
  • Italy
  • Latvia
  • Lithuania
  • Luxembourg
  • Malta
  • Netherlands
  • Poland
  • Portugal
  • Romania
  • Slovakia
  • Slovenia
  • Spain
  • Sweden
  • Iceland
  • Liechtenstein
  • Norway
Inakuja hivi karibuni
Estonian ID-cardUS$ 0.55
  • Estonia
Inakuja hivi karibuni
eParaksts mobileUS$ 0.55
  • Latvia
Inakuja hivi karibuni
Ngazi tatu, orodha moja ya bei

Anza bure. Lipa kadri unavyotumia. Kuza hadi Enterprise.

Uthibitishaji 500 bila malipo kila mwezi, milele. Kisha lipa tu moduli inapofanya kazi. Mikataba maalum, uhifadhi wa data, na makubaliano ya kiwango cha huduma (SLAs) kwenye Enterprise.

Bure

$0/ mwezi · hakuna kadi

Kwa ajili ya kuunda, kujaribu, na watumiaji wako wa kwanza.

Kila kitu unachohitaji kuanzia:
  • Uthibitishaji kamili wa KYC 500 kila mwezi
  • Kitambulisho, uhai, kulinganisha uso, kifaa & IP
  • Ishara za udanganyifu 200+, orodha nyeusi, marudio
  • KYC inayoweza kutumika tena kwenye mtandao wa Didit
  • Mjenzi wa mtiririko wa kazi, usimamizi wa kesi, SDKs
  • Usaidizi wa AI AI agent ndani ya console, docs, na jumuiya.
Maarufu zaidi

Lipa kadri unavyotumia

$0.33kwa KYC kamili

Moduli 25+, bei wazi. Punguzo la kiotomatiki kwa wingi.

Kila kitu kilichopo kwenye Bure, pamoja na:
  • Uchunguzi na ufuatiliaji wa AML kuanzia $0.07
  • Bei ya usajili wa biashara kulingana na nchi na ngazi ya data
  • Ufuatiliaji wa miamala kwa $0.02 kila moja
  • Uchunguzi wa pochi kwa $0.15 kwa kila ukaguzi
  • Mtiririko wa white-label chini ya chapa yako mwenyewe
  • Usaidizi wa AI AI agent ndani ya console, docs, na jumuiya.

Enterprise

Maalummkataba wa mwaka

Kwa kiasi kikubwa na programu zilizodhibitiwa.

Kila kitu kilichopo kwenye Lipa kadri unavyotumia, pamoja na:
  • Mikataba ya kila mwaka, bei ya kiasi kilichokubaliwa
  • Masharti maalum ya kisheria na SLA ya 99.99% ya muda wa kufanya kazi
  • Uhifadhi wa data, uhifadhi, ukaguzi wa usalama
  • Wakaguzi wa mikono kwa mahitaji
  • Masharti ya muuzaji na white-label
  • Usaidizi wa kipaumbele kutoka kwa binadamu Kituo cha Slack kinachoshirikiwa saa 24/7, meneja maalum wa mafanikio.

Punguzo la wingi hutumika kiotomatiki kadri matumizi yanavyoongezeka — hakuna mazungumzo, hakuna simu ya mauzo.

FAQ

Maswali ya Kawaida

Didit ni nini?

Didit ni miundombinu ya utambulisho na udanganyifu, jukwaa ambalo tulitamani lingekuwepo tulipokuwa tukijenga bidhaa sisi wenyewe: wazi, rahisi kubadilika, na rafiki kwa wasanidi, ili lifanye kazi kama sehemu halisi ya stack yako badala ya black box unayounganisha.

API moja inashughulikia kuthibitisha watu (KYC, know your customer), kuthibitisha biashara (KYB, know your business), kuchunguza crypto wallets (KYT, know your transaction), na kufuatilia miamala kwa wakati halisi, kwenye stack iliyojengwa kuwa:

  • Haraka, chini ya sekunde 2 p99 kwenye kila session
  • Inaaminika, inatumika na kampuni 3,000+ katika nchi 220+
  • Salama, SOC 2 Type 1 & Type 2, ISO 27001, GDPR-native, na kuthibitishwa rasmi na mdhibiti wa kifedha wa Uhispania kuwa salama zaidi kuliko kumthibitisha mtu ana kwa ana

Msingi wake: aina 14,000+ za hati katika lugha 48+, vyanzo vya data 1,000+, na ishara za udanganyifu 200+ kwenye kila session. Miundombinu ya Didit inajifunza kwa nguvu kutoka kila session na inaboresha kila siku.

Uthibitishaji wa digital ID wallet ni nini?

Mtumiaji anathibitisha kwa kutumia kitambulisho cha kielektroniki (eID) kilichopo, na Didit huangalia ushahidi wa kitambulisho uliosainiwa kabla ya kuandika matokeo kwenye session. Mwingiliano unategemea wallet: Smart-ID huomba nambari ya kibinafsi, huku Mobile-ID pia ikiomba nambari ya simu. Zote hutumia msimbo wa kulinganisha na idhini kwenye kifaa cha mtumiaji.

Uthibitishaji wa wallet ni njia moja ndani ya ID Verification, pamoja na kunasa hati na utafutaji usio wa hati. Katika API ya workflow, kipengele hicho kinaitwa OCR. Wallet zinazopatikana hutegemea nchi na mazingira. Anza na nyaraka za wallet.

Ni digital ID wallets zipi ninaweza kuwezesha katika uzalishaji?

MitID, BankID Uswidi, Finnish Trust Network, Smart-ID na Mobile-ID zinapatikana. MitID inahudumia Denmark, BankID Uswidi na Finnish Trust Network Ufini; Smart-ID inahudumia Estonia, Latvia, Lithuania na Ubelgiji; Mobile-ID inahudumia Estonia na Lithuania. Wallet nyingine zilizoorodheshwa, zikiwemo iDIN, BankID Norway, Freja eID, ConnectID na EUDI Wallet, zinakuja hivi karibuni.

Chagua pochi zinazokubalika kwa kila nchi kwenye koni. API ya mtiririko wa kazi inatumia katalogi kwa mazingira na nchi yako. Tumia mwongozo wa ujumuishaji kusanidi chelezo ya hati.

Je, watumiaji wa Smart-ID na Mobile-ID huthibitisha utambulisho wao vipi?

Mtumiaji huchagua pochi inayokubalika, anaweka nambari yake ya kibinafsi, na anatoa nambari ya simu kwa Mobile-ID. Didit inaonyesha msimbo wa kulinganisha. Mtumiaji huangalia kuwa msimbo unalingana na ule ulio kwenye simu yake na kuidhinisha ombi la uthibitishaji hapo. PIN inaingizwa tu kwenye kifaa cha mtumiaji, kamwe si kwenye Didit.

Didit inasubiri jibu lililosainiwa, huangalia saini na hali ya cheti, na kurejesha sifa za utambulisho zilizothibitishwa kwenye kipindi. Muda wa kukamilisha unategemea mtumiaji na jibu la pochi. Fuata mwongozo wa Smart-ID na Mobile-ID.

Je, Didit huthibitisha uthibitishaji wa Smart-ID na Mobile-ID vipi?

Didit huangalia saini ya uthibitishaji dhidi ya changamoto kwa session hiyo, huthibitisha cheti dhidi ya watoaji wanaoaminika, na huangalia hali yake ya kufutwa. Utambulisho uliorejeshwa lazima ulingane na msimbo wa kibinafsi na nchi iliyotumika kwa ombi. Mtiririko uliopangishwa pia huthibitisha tokeni yake ya session na kukataa majaribio ya kukamilisha yanayorudiwa.

Ukaguzi huu huunganisha jibu lililosainiwa na mtumiaji anayetarajiwa na ombi. Hazibadilishi hitaji la mtumiaji kulinganisha misimbo na kulinda kifaa chake. Soma njia ya uthibitishaji, mtoa huduma wa wallet na sifa zilizosainiwa kwenye matokeo ya session, na thibitisha saini za webhook kabla ya kutumia matokeo katika programu yako. Tazama mwongozo wa kiufundi.

Nini hutokea kama mtumiaji hana wallet, akaghairi, au kuingia kukashindikana?

Swichi moja inashughulikia visa vyote vitatu: hana wallet, kaghairi, au kuingia kukashindikana. Inaweza kurudi kwenye kunasa hati au kukataa kipindi, na unaweka hii kwa kila nchi.

Matokeo hurekodi njia iliyorudiwa na sababu, hivyo kuingia kwa wallet iliyoachwa hakufichwi kamwe.

Ni nchi zipi zinazotumia Smart-ID na Mobile-ID katika Didit?

Smart-ID inapatikana kwa Estonia, Latvia, Lithuania na Ubelgiji. Mobile-ID inapatikana kwa Estonia na Lithuania. Mobile-ID haitumiki kwa Latvia. Watumiaji wanahitaji kitambulisho kinachostahiki kwa pochi yao iliyochaguliwa.

Wezesha kila pochi kwa nchi inayolingana katika mtiririko wako wa kazi. Soma mwongozo wa Smart-ID na Mobile-ID kwa hatua za uthibitishaji, sehemu za utambulisho zilizothibitishwa na chelezo ya hati.

Data ya mteja wangu inakaa wapi na inalindwaje?

Imesimbwa kwa njia fiche wakati wa usafirishaji na inapohifadhiwa, katika eneo unalochagua, chini ya SOC 2 Type 1 na Type 2, ISO 27001 na GDPR.

Wallet inashiriki tu sifa zinazoombwa, na unaweza kuondoa tiki kwenye sifa yoyote ya hiari ili isihifadhiwe kabisa. Sifa zinazohitajika huhifadhiwa kila wakati, pamoja na rejeleo la uthibitisho uliosainiwa ambalo mkaguzi anahitaji.

Maelezo kamili yanapatikana kwenye /security-compliance.

Je, Didit inatii kanuni za sekta yangu?

Didit inatumika na kampuni 3,000+ katika sekta zinazodhibitiwa — fintech, benki, iGaming, crypto, masoko, huduma za afya na serikali.

Kuingia kwa wallet kunafikia uhakikisho wa cryptographic, ushahidi wenye nguvu zaidi kati ya njia tatu, na kiwango cha uhakikisho kinarekodiwa kwenye kila kipindi. Pale ambapo mdhibiti anataja eID maalum ya kitaifa, kukubali wallet hiyo kwa kawaida ndiyo njia safi zaidi ya kuitimiza.

Memo kuhusu /security-compliance.

Ninaweza kuunganisha na kuanza kuthibitisha watumiaji haraka kiasi gani?

Dakika chache, kwa njia tatu.

  • Hakuna code — jenga mtiririko wa kazi kwenye console, weka tiki kwenye wallet unazokubali kwa kila nchi, na mtumie mtumiaji wako kiungo.
  • SDK au redirect — Web, iOS, Android, React Native na Flutter, au ukurasa uliopangishwa.
  • AI agent — bandika prompt ya kuunganisha kwenye ukurasa huu kwenye Claude Code, Cursor au Codex na uiruhusu iunganishe kila kitu, ikiwemo webhook.

Anza kwenye business.didit.me, au soma docs.didit.me/integration/integration-prompt.

Miundombinu ya utambulisho na udanganyifu.

API moja kwa KYC, KYB, Ufuatiliaji wa Miamala, na Uchunguzi wa Wallet. Unganisha ndani ya dakika 5.

Uliza AI ifupishe ukurasa huu