Data minimisation
Collect only what is necessary for the configured check and use case
IDENTITY & KYC
Identity & KYC
Identity and KYC enter the workflow as governed controls, not opaque steps. Firmato separates data collection, verification, outcome, review and evidence retention while keeping the actual provider visible.
Provider separation
External checks are orchestrated without exposing credentials to the browser
Traceable outcomes
Status, time, technical source and audit remain linked to the subject or case
Roles & privacy
Access, review and retention can be separated by role and purpose
IDENTITY GOVERNANCE
Know who enters the process without turning KYC into a black box.
Firmato organises the identification and verification journey; the nature, accuracy and coverage of the check depend on the external service actually enabled.
Onboarding
Identity data, contacts and consent are collected in the correct business context.
Verification
The check is routed to the provider or source configured for the use case.
Review
Results can require human review, escalation or additional information.
Evidence
Decision, check time and technical references are retained according to policy and permissions.
KYC FLOW
From declared data to a governed result.
01Collect data and consent
02Select the check
03Send to enabled provider
04Receive result and references
05Review or escalate
06Retain according to policy
PRIVACY & CONTROL
Separate purpose, access and responsibility.
Privacy by design
Identity data should be processed for defined purposes with retention aligned to the relationship and applicable obligations.
Least privilege
Operators, KYC officers, auditors and administrators may have different visibility and powers.
Provider transparency
A result is not presented as “verified by Firmato” when it originates from an external provider or data source.
USE CASES
Identity & KYC for processes that need more than an email address.
- Customer and counterparty onboarding
- Signer and representative checks
- Supplier and procurement workflows
- Cases with differentiated risk or control levels
Accuracy principle
A KYC check does not automatically equal qualified identity verification. Its value depends on the source, method, available data and provider actually used.
FIRMATO · DIGITAL TRUST
Bring identity and signing into the same process.
Configure the level of control that matches the risk while keeping data, providers, responsibilities and evidence separated.