Step 1
Define the decision
Your service sends who is asking, what they need, which policy version applies, and channel context. The format is the same for live API calls and offline packets.
KYC and AML screening with stateless verification
Binary onboarding and monitoring decisions with signed proof, without AffixIO holding a duplicate customer file. Your KYC vendor and internal lists remain authoritative.
Short answer: AffixIO returns a signed eligible or not eligible outcome for KYC and AML policy checks. Underlying identity attributes stay in systems you already operate wherever the design allows.
Stateless verification · Signed yes/no outcomes · No standing PII store
Industry context
Banks and fintechs must onboard customers and monitor activity under AML regulations while limiting data proliferation. Copying full KYC packets into every downstream system increases breach surface and complicates GDPR and PCI narratives.
What security and product teams face
Teams often replicate customer files into analytics lakes, partner portals, and workflow tools to answer simple yes or no questions. Each copy needs its own retention schedule and access control.
AffixIO approach: AffixIO evaluates onboarding and monitoring rules against sources you authorise, then returns a signed binary outcome. Security and financial crime teams get auditable evidence without AffixIO becoming another system of record.
Where verification applies
- Retail onboarding
Confirm policy pass or refer at account opening without exporting full document images to every microservice.
- Business banking KYB
Verify entity eligibility signals for SME onboarding workflows.
- Periodic refresh
Re-run due diligence triggers with the same API contract as day-one onboarding.
- Partner bank referrals
Share decisions, not full files, when a sponsor bank relies on your KYC outcome.
- Agent-assisted onboarding
Contact centre tools receive the same signed signal as digital channels.
From request to verified outcome
The same three-step model used across AffixIO applies here: describe the decision, evaluate against sources you control, return yes or no with proof.
Step 2
Evaluate against authority
Checks run against registries and rules you authorise. Sensitive fields stay in systems you already operate wherever the design allows.
Step 3
Return yes or no with proof
The response is explicit, signed where required, and suitable for audit or partner handoff. AffixIO does not retain the request after the decision.
Where AffixIO sits in your banking stack
A thin stateless layer between channels, agents, and your core systems. AffixIO answers verification questions at transaction time; it does not replace core banking, card processing, or your identity provider.
Your channelsMobile banking, internet banking, contact centre tools, merchant portals, partner APIs, and software agents acting on behalf of customers.
AffixIOStateless verification via API and SDK. Binary yes or no outcomes with cryptographic proof suitable for audit.
Your core systemsCore banking, card authorisation, CRM, risk engines, KYC vendors, and directories you already accredit.
Further reading: technical architecture, what AffixIO is, banking systems integration.
What you can implement today
kyc circuit
Purpose-built eligibility path documented in the AffixIO circuit catalog.
Sanctions and lists
Evaluate against lists and rules you connect; AffixIO does not replace a list provider.
Audit evidence
Signed artefacts suitable for financial crime and internal audit review.
Example response (illustrative)
{
"eligible": true,
"proof": "<signed verification artefact>",
"decision_id": "dec_…",
"evaluated_at": "2026-05-15T12:00:00Z"
}
OpenAPI documentation: api.affix-io.com. Integrate via REST, webhooks, or SDKs.
How teams deploy
Managed API
Connect through your API gateway with TLS, mutual authentication where required, and departmental logging.
Self-hosted
Run inside your accredited boundary when policy requires on-premise or private cloud.
Offline and edge
Validate signed proofs locally where connectivity is limited. See offline verification.
Agentic channels
Machine clients receive the same binary signals as citizen channels. See M2M verification.
Deploy behind your API gateway with TLS and mutual authentication where your security policy requires it. Managed API and private cloud options are available.
Cryptography and data handling
Built for long-lived programmes that must plan beyond legacy signatures and minimise data held at the verification boundary.
Stateless by design
No long-term store of who asked or the attributes inside a request. Supports proportionate DPIA narratives.
Post-quantum ready
Verification artefacts can use quantum-resistant signing aligned with industry post-quantum direction, with optional enterprise key management where your policy requires it.
Zero-knowledge outcomes
Where policy allows, demonstrate that a rule evaluated to yes without exporting underlying registry content.
Patent pending: AffixIO verification pipeline protected under GB2510622.0 (pending).
Regulatory and assurance alignment
AffixIO is designed to support data-minimization narratives common in financial services assurance. Your legal and compliance teams remain responsible for licensing, scheme rules, and supervisory filings.
- UK GDPR and EU GDPR aligned data handling (stateless request model)
- PCI DSS scope reduction through not storing cardholder data at the verifier
- PSD2 strong customer authentication patterns (verification at transaction time)
- AML programme support via binary eligibility without duplicating customer files
- SOC 2 and ISO 27001 compatible deployment models (managed API or private cloud)
- Pseudonymised audit metadata for security operations and internal audit
See GDPR compliance, PCI and data minimization, and privacy policy.
Common questions
Does AffixIO store customer personal data?
No. AffixIO is stateless verification infrastructure. It evaluates a request against sources you authorise and returns a signed yes or no with proof. It does not maintain a standing database of customers or request payloads.
Is AffixIO a bank, payment scheme, or regulated financial institution?
No. AffixIO provides verification infrastructure via API and SDK. Licensing, scheme membership, and supervisory obligations remain with your organisation.
Can verification work offline for branches and field teams?
Yes. Signed proofs can be validated where connectivity is limited, with reconciliation when the device or site is back online. See offline banking payments and offline payment verification pages.
How does AffixIO relate to our existing KYC vendor?
AffixIO is a decision and proof layer. Your KYC and AML vendors, core banking, and directories remain systems of record. AffixIO returns binary outcomes at the point of need without copying full customer files into another datastore.
Speak with our banking team
Share your channel mix, regulatory constraints, and first verification use case. We will respond with a practical integration outline.
AffixIO is an independent verification technology provider. References to regulations, schemes, and industry roles describe integration patterns; they do not imply certification, scheme membership, or endorsement by any bank or network. Production deployment is subject to your security, legal, and procurement review.