Fast KYC and AML checks, all in one link
Send your customer a single link. They photograph their ID, take a short face check and upload a proof of address. You get a clear decision, the reasons behind it, and a full report.
- carries every check
- 1 link
- carries every check
- to combine as you need
- 5 checks
- to combine as you need
- pass, review or fail, with reasons
- 3 outcomes
- pass, review or fail, with reasons
- for your customer to install
- 0 apps
- for your customer to install
Built for African documents
Passports, national ID cards, driving licences and birth certificates, read from the photo and checked against their own rules.
Stop fraud at the door
Liveness, face matching and a check for AI-made or edited images catch the attempts a person looking at a photo would miss.
Less manual review
Clear cases are decided automatically. Only the ones that genuinely need a person reach your team, with the reasons shown.
Everything in one console
Verifications, evidence, AML results, reports and an audit trail, in one place your compliance team can work from.
One verification platform for
every check you need
Pick the checks each customer goes through. They all run in the same link, in the order you set.
Read and check the document itself
The customer photographs their passport, ID card, driving licence or a child's birth certificate. We read the details, check the machine-readable zone, the dates and the photo, and flag images that were edited or made by AI.
- Passports
- National ID cards
- Driving licences
- Birth certificates
- AI image detection
P<NGAADEYEMI<<AMARA<<<<<<<<<
A0123456<7NGA9001015F3001014<<<
- Machine-readable zone is validPassed
- Document has not expiredPassed
- Photo has not been editedPassed
From link to decision in three steps
Your customer never leaves a flow that feels like yours, and your team only steps in when it matters.
- Step 1
Create a verification
Call the API with the checks you want and what you know about the customer. You get back a link that is theirs alone.
- Step 2
They verify on their phone
They open the link, or scan a QR code from a computer, and are guided through each step in their browser. No app to install.
- Step 3
You get the decision
Pass, review or fail, with the reason for each step, sent to your callback and shown in the console with a PDF report.
See how it all connects
Start with the checks you need today and add more as your requirements grow. Nothing to stitch together.
Checks
What each customer goes through.
- ID document
- Liveness and face match
- Proof of address
- AML screening
- Due diligence forms
- AI image detection
Console
Where your team works.
- Verifications and review
- PDF verification reports
- Audit log
- Accounts and roles
Integration
How it connects to your product.
- REST API with API keys
- Result callbacks
Integrate in an afternoon
A small REST API with one call to start a verification. Your customers do the rest on a page we host.
- One request opens a verification and returns the customer's link
- Choose the checks per customer, in the order you want them
- Results arrive at your callback and can be fetched at any time
- Event names follow the vocabulary you may already know from other providers
curl -X POST https://api.pangolinkyc.com/v1/verifications \
-H "X-API-Key: $PANGOLIN_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"reference": "customer-48213",
"services": ["document", "face", "address", "aml"],
"applicant": {
"first_name": "Amara",
"last_name": "Adeyemi",
"address": "KG 11 Avenue 24, Kigali, Rwanda"
},
"callback_url": "https://example.com/kyc/callback",
"redirect_url": "https://example.com/welcome"
}'Adapts to your business
One set of checks for every regulated industry you grow into. Pick the steps your regulator expects and leave out the rest.
- Fintech and payments
- Brokerage and trading
- Digital assets
- Lending
- Insurance
- Marketplaces
Designed with security and privacy in mind
Identity data is the most sensitive thing your customers give you. It is handled that way at every step.
Consent first
Customers are told what is collected, why, and for how long, and agree before the camera opens.
Private by default
Evidence is kept in access-controlled storage and is only shown to signed-in staff whose role allows it.
Everything audited
Every request and every action in the console is recorded with who did it, when, and from where.
Secrets never stored in logs
Passwords, keys and tokens are masked before anything is written, so the audit trail is safe to read.
Roles for every team
Owners, administrators, compliance reviewers, support and read-only auditors each get only what their role needs.
Links that expire
Every verification link is single-purpose, expires on a schedule you set, and is never indexed by search engines.
Frequently asked questions
Something else on your mind? Write to kyc@tuesday.africa.
What is KYC?
Know Your Customer is the process regulated businesses use to confirm that a customer is who they say they are before serving them. It usually means checking an identity document, confirming the person is present, and screening them against sanctions and politically exposed persons lists.
Which documents can customers use?
Passports, national ID cards and driving licences for adults, and birth certificates when a parent or guardian verifies a child. For proof of address, a recent utility bill or bank statement.
Does my customer need to install an app?
No. The verification runs in the phone's browser from the link you send. If they open it on a computer, they are shown a QR code to carry on with their phone's camera.
What happens when a check is not clear-cut?
The verification is marked for review instead of being failed, with the reasons. A compliance reviewer on your team sees the evidence side by side in the console and makes the call. Every decision is recorded.
How does AML screening work?
Once the document and face checks pass, the verified name and date of birth are screened against international sanctions, politically exposed persons and other watchlists. Any possible match comes with the full record, including the reasons for listing, shown in English.
How do we integrate?
Create a verification with one API call, send the customer the link it returns, and receive the result at your callback URL. You can also fetch any verification and its PDF report through the API or the console.
How long is personal data kept?
Each kind of evidence has a stated retention period, shown to the customer before they start and set out in the privacy notice. Verification links themselves expire on the schedule you choose.
Make Pangolin KYC your verification layer
Tell us what your regulator expects and we will set up the checks with you.