UnbreakableID provides verifiable, reusable credentials aligned with the UK Digital Verification Services (DVS) Trust Framework, which gained statutory force under the Data (Use and Access) Act 2025. This framework defines how digital identity providers must operate to meet regulatory, banking, and government standards.
How UbID addresses compliance requirements
- Cryptographic assurance
Every credential is signed with blockchain‑based PKI. Verifiers can check authenticity without contacting the issuer, reducing reliance on central databases. - Zero‑trust architecture
Private keys remain in the user’s browser. Credentials are controlled by the holder, not stored in a central repository. - Selective disclosure
Users share only the attributes required for a transaction (e.g., “over 18” or “KYC verified”), minimizing oversharing of personal data. - Revocation and audit
Credentials include revocation status and issuance metadata. Institutions can demonstrate compliance with audit trails and evidence logs.
Credential types for regulated use
- UbID basic profile — reusable identity attributes for account creation.
- Profile extension — optional personalization fields.
- Face vector binding — biometric liveness proof bound to blockchain identity.
- Face vs Official ID — high‑assurance credential linking biometric verification to a national ID or passport, suitable for KYC/AML checks.
Certification and assurance
UbID is designed to meet the technical and privacy requirements of the DVS Trust Framework. Formal certification requires assessment and registration with the UK DVS regulator. Institutions integrating UbID can leverage our credential architecture to accelerate compliance readiness and reduce the burden of repeated KYC checks.
Why this matters for finance
- Lower onboarding friction — issue once, reuse across services.
- Reduced fraud — cryptographic signatures and biometric binding.
- Audit‑ready evidence — regulators and compliance teams can verify credential issuance, revocation, and disclosure events.
- Future‑proof — aligned with international standards (W3C Verifiable Credentials).
Compliance FAQ
1. Is UbID certified under the UK DVS Trust Framework? UbID is designed to meet the technical and privacy requirements of the DVS Trust Framework. Formal certification requires assessment and registration with the UK regulator. Institutions using UbID can accelerate compliance readiness, but certification is a separate process.
2. How does UbID provide audit evidence? Every credential includes issuance metadata, issuer DID, and cryptographic proof. Revocation status and disclosure events are logged, enabling institutions to demonstrate compliance during audits.
3. What happens to biometric data? UbID never shares raw biometric images. Face vectors are hashed or encrypted and bound to the user’s blockchain identifier. This ensures liveness and identity binding without exposing sensitive biometric data.
4. How does selective disclosure protect privacy? Users can share only the attributes required for a transaction (e.g., “KYC verified” or “over 18”). This prevents oversharing of personal data and aligns with data minimization principles in the DVS framework.
5. How is revocation handled? Credentials carry revocation status that verifiers can check in real time. If a credential is revoked or expired, the wallet shows a clear status indicator and prompts the user to re‑verify.
6. Can UbID integrate with existing identity services? Yes. UbID enhances existing identity solutions by issuing reusable, cryptographically signed credentials. Face biometrics remain part of the flow but are bound to credentials that can be reused across partners.
7. What financial use cases are supported? UbID credentials can be used for account opening, loan origination, recurring payment authorization, merchant onboarding, and cross‑institution KYC reuse — all with audit‑ready evidence.
Need more Information?
Our documentation covers every technical detail, or you can speak directly with our engineering team.