How do we know the person is the one on the passport?
Because the check ran and its evidence is on the record: document authenticity, active liveness and face match through our identity verification provider, with the scores, the images and every cross-check between what was typed and what the document says. Where there is no evidence, the record says so in plain words rather than showing a tick.
Four checks, filed as evidence
The document is tested for authenticity (printed copy, screen replay, portrait), the person proves they are live in three dimensions, the face is matched to the document portrait, and the details read from the document are compared with what the person typed. Every score is on the record with its source; a difference goes to a reviewer, never to an automatic decline.
- Document authenticity, liveness and face match, with scores
- Typed against document: name, date of birth, nationality
- Chip not read is said, not hidden
| Check | Result | Detail |
|---|---|---|
| Document authenticity | Pass | Printed copy 100, screen replay 100, portrait 100 |
| Face match | Pass | 97.8 against the document portrait |
| Liveness | Pass | Active 3D, 99.9 |
| NFC chip | Not read | Chip not read |
| Typed vs document | Differs | Nationality typed "Guernsey", document GBR |
From the onboarding link, or from the record
Verification runs first in the client's onboarding link, so the form starts with a verified name. It can also be sent from a person's record at any time: a director whose passport has been renewed, a beneficiary verified on paper years ago, a periodic review your procedures say needs a fresh check.
- "Verified, unevidenced" for identity accepted before Flarion
- A link to the person, or verify in the room
- Twelve checks per name per year under fair use
- Status
- Verified, unevidenced
- Last verified
- On paper, 2021, by a previous provider
- Action
- Send a verification link
The images are yours, in Guernsey
At decision time the document and face images are captured out of the provider and into the firm's own store in Guernsey, with format, size and a SHA-256 hash. They are served only inside Flarion and every view is logged with who, when, from which device and where. A shared provider portal never holds your client's passport.
- Captured at decision time, hashed
- Served only inside Flarion, every view logged
- Never on a shared provider account
| Image | Captured | Format | SHA-256 |
|---|---|---|---|
| Passport, front | 22 Sep 2026 10:14 | JPEG, 1920 × 1280 | 9f3c…a41e |
| Face capture | 22 Sep 2026 10:15 | JPEG, 1080 × 1080 | 27b0…c9d2 |
| Liveness frame | 22 Sep 2026 10:15 | JPEG, 1080 × 1080 | e1a7…5f08 |
Where the declaration was signed
When the client signs the declaration, the address it came from is looked up on Flarion's own server against location databases held on it: town, country and network. A hosting or VPN network is shown in amber as a prompt to ask, never used to reject. No address leaves the box.
- Town, country and network on the review
- VPN and hosting networks flagged, not refused
- Looked up locally, no new sub-processor
- Signed
- 22 Sep 2026, 10:19
- Address
- 81.2.69.160
- Location
- St Peter Port, Guernsey
- Network
- Residential broadband, Guernsey
- Note
- Residential network
A hosting or VPN network is shown in amber as a prompt to ask, never used to reject. Looked up on this server against databases held on it; no address leaves the box.
Retention the firm sets, and one erasure path
The provider's copy of identity data is erased on a schedule against the retention limit the firm sets, twelve months if it sets none. The MLRO's erasure button and the nightly agent run the same code, so the firm's answer to a data subject does not depend on who pressed it. The firm's own record of the check is kept for the six years the Fiduciary Rules require.
- Retention limit in Settings, nightly agent
- One erasure path for the button and the clock
- The check record survives; the images do not
Questions about identity verification
Who does the checking?
A specialist identity verification provider, under contract to us. The client's document images and face capture go to it for document authenticity, liveness and face match, and the result comes back with its scores. Flarion holds the decision, the extracted details, the scores and, from decision time, the images themselves in the firm's own store in Guernsey. The provider is named in the Due Diligence Pack and in our data processing agreement.
Is anyone declined automatically?
No. A name that does not match the document, a nationality typed differently from the passport, a low score: all of them go to a reviewer with the difference shown. A machine never declines a person.
Is the passport chip read?
Not yet. The printed page is read and tested for authenticity, and the record says "chip not read" in plain words rather than implying it was. Chip reading by NFC comes with the native app.
What about a client verified years ago on paper?
The record shows "verified, unevidenced": the firm accepted identity at the time but Flarion holds no check for it. The record never shows a tick it cannot back. You can send a verification link from the record whenever your procedures call for it.
How many checks are included?
Twelve per name per year, under fair use. Beyond that, checks are billed at the provider's cost and you hear from us first.
See it on a real passport.
Fifteen minutes and a passport, and you will have watched a verification land on a record.