Product-specific & third-party product terms

This feature enables customers to step-up face verification to a forensic expert, to perform a manual comparison and liveness check after initial document verification. Step-up verification is based on business rule configuration. Availability:  Global

This feature enables customers to step-up face verification to a forensic expert, to perform a manual comparison and liveness check after initial document verification.  Step-up verification is based on business rule configuration.

Previous SKU: MVP-AML
The AML check provides all the summary information of both the IDV and KYC services plus the added detail of Watchlists, linked addresses and detailed UK Credit Bureau register records. This product is restricted to organizations that are required to perform Anti-Money Laundering (AML) checks because it will leave an AML search footprint on the consumer's credit reference file. Availability:  UK only

The following terms shall apply solely to customer's use of Equifax Credit Reference Checks.

“CRAIN” means the Credit Reference Agency (CRA) Information Notice, the industry standard privacy information policy adopted by the leading UK CRAs (a copy of which can be found here: https://www.equifax.co.uk/crain), and as may be updated from time to time;
“Equifax” means Equifax Limited, a company incorporated and registered in England and Wales with company number 2425920 registered office is at 1 Angel Court, London, EC2R 7HJ;
“Information Services” means any services (including the provision of Output Data) provided by Equifax that the customer is authorised to receive via Mitek.
“Output Data” means any information or data provided by Equifax that the customer is authorised to receive via Mitek;
“Resale Agreement” the agreement between Equifax and Mitek, under which Mitek is permitted to resell the Information Services and Output Data;
“Search” means a search made of Equifax’s database (including via Mitek) for the purpose of obtaining information in relation to an individual or corporate entity;
1. PERMITTED USE
1.1 The customer shall only use the Output Data;
1.1.1 in compliance with all applicable laws;
1.1.2 solely as permitted in the Agreement; and
1.1.3 otherwise in compliance with these terms.
1.2 The customer must not:
1.2.1 resell or offer to resell any of the Output Data; or
1.2.2 disclose to any other person any of the Output Data, except:
1.2.2.1 when required to do so by law or any regulatory authority, including following a subject access request submitted by a consumer to whom the data relates; or
1.2.2.2 to the customer’s personnel whose duties reasonably require such disclosure, on condition that the customer ensures that each such person to whom such disclosure is made, is informed of the customer’s obligation of confidentiality and non-disclosure, and are subject to equivalent obligations.

2. AUTHENTICATION
2.1 NOT USED
2.2 The customer acknowledges that a failure to properly validate and authenticate a consumer may result in the use and/or disclosure of consumer data in breach of applicable law including the UK Data Protection Law, potentially requiring the involvement of the Financial Conduct Authority and/or the Information Commissioner’s Office. Accordingly, to the extent that the customer becomes aware of or reasonably suspects that a consumer has not been properly authenticated or is not the person they purported to be, the customer will:
2.2.1 immediately notify Equifax (which may be given via Mitek) and provide all relevant details available to enable Equifax and Mitek to determine whether a notification to the Financial Conduct Authority and/or Information Commissioner’s Office is required (a “Notification”);
2.2.2 provide all reasonable assistance and co-operation requested by Mitek and/or Equifax in relation to a Notification or to otherwise investigate the matter.
3. ACCURACY
3.1 The Client acknowledges and agrees that:
3.1.1 the information forming part of the Output Data is provided to Equifax by third parties over which Equifax does not have control, in particular in relation to the accuracy or completeness of such information;
3.1.2 the volume and nature of the information on Equifax databases makes it impractical for Equifax to verify the information;
3.1.3 if Equifax were to attempt to verify the Output Data, Equifax would only be able to offer the Information Services to Mitek at significantly increased cost, which would in turn increase the costs paid by the Customer; and
3.1.4 Equifax is not in any circumstances liable to any party for any loss or damage at all arising from any inaccuracies, faults or omissions in, or in the provision of, the Output Data unless caused by Equifax’s negligence or wilful default.
4. DATA PROTECTION AND TRANSPARENCY
4.1 For the purposes of the data protection regulations, Customer, Equifax, and Mitek shall each be independent controllers of any personal data contained within the input data and Output Data, and Customer shall comply with its obligations under the Data Protection Regulations.
4.2 Without prejudice to the generality of clause 4.1, before providing any input data to Equifax (including via Mitek) or otherwise conducting a search in relation to a consumer, Customer shall:
4.2.1 notify the consumer about whom a search is made that their information will be disclosed to a credit reference agency, which may keep a record of that information and disclose it (and the fact that a search was made) to its other customers, including for the purposes of assessing the risk of giving credit and occasionally to prevent fraud, money laundering and to trace debtors;
4.2.2 make a copy of the CRAIN available to the consumer so that they might understand how the credit reference agencies process their personal data; and
4.2.3 on request (which may be received directly or via Mitek), provide a copy of the notification used to satisfy the obligations of the above to Equifax.
5. SECURITY AND AUDIT
5.1 Customer shall maintain adequate security measures to protect the integrity, security and confidentiality of all Output Data, including as a minimum by complying with Equifax’s security requirements and policies, as made available by Equifax to Mitek and Customer from time to time.
5.2 Customer shall provide to Mitek and Equifax any information reasonably requested in order to assess whether the Customer’s use of the Information Services and Output Data is in compliance with these terms.
6. TERMINATION OF SERVICES
6.1 Equifax may cease to make the Output Data available to Mitek for resale to the customer in the event of the following:
6.1.1 the customer commits a material breach of these Terms;
6.1.2 the provision or intended use of Information Services by the customer is or is likely to be or become unlawful due to a change in Applicable Law, regulatory guidance or court ruling.

The AML check provides all the summary information of both the IDV and KYC services plus the added detail of Watchlists, linked addresses and detailed UK Credit Bureau register records. This product is restricted to organizations that are required to perform Anti-Money Laundering (AML) checks because it will leave an AML search footprint on the consumers credit reference file.

The following terms shall apply solely to customer's use of Equifax Credit Reference Checks.

“CRAIN” means the Credit Reference Agency (CRA) Information Notice, the industry standard privacy information policy adopted by the leading UK CRAs (a copy of which can be found here: https://www.equifax.co.uk/crain), and as may be updated from time to time;
“Equifax” means Equifax Limited, a company incorporated and registered in England and Wales with company number 2425920 registered office is at 1 Angel Court, London, EC2R 7HJ;
“Information Services” means any services (including the provision of Output Data) provided by Equifax that the customer is authorised to receive via Mitek.
“Output Data” means any information or data provided by Equifax that the customer is authorised to receive via Mitek; 
“Resale Agreement” the agreement between Equifax and Mitek, under which Mitek is permitted to resell the Information Services and Output Data;
“Search” means a search made of Equifax’s database (including via Mitek) for the purpose of obtaining information in relation to an individual or corporate entity;
1.    PERMITTED USE
1.1    The customer shall only use the Output Data;
1.1.1    in compliance with all applicable laws;
1.1.2    solely as permitted in the Agreement; and
1.1.3    otherwise in compliance with these terms. 
1.2    The customer must not:
1.2.1    resell or offer to resell any of the Output Data; or
1.2.2    disclose to any other person any of the Output Data, except:
1.2.2.1    when required to do so by law or any regulatory authority, including following a subject access request submitted by a consumer to whom the data relates; or
1.2.2.2    to the customer’s personnel whose duties reasonably require such disclosure, on condition that the customer ensures that each such person to whom such disclosure is made, is informed of the customer’s obligation of confidentiality and non-disclosure, and are subject to equivalent obligations.

2.    AUTHENTICATION
2.1    NOT USED
2.2    The customer acknowledges that a failure to properly validate and authenticate a consumer may result in the use and/or disclosure of consumer data in breach of applicable law including the UK Data Protection Law, potentially requiring the involvement of the Financial Conduct Authority and/or the Information Commissioner’s Office.  Accordingly, to the extent that the customer becomes aware of or reasonably suspects that a consumer has not been properly authenticated or is not the person they purported to be, the customer will:
2.2.1    immediately notify Equifax (which may be given via Mitek) and provide all relevant details available to enable Equifax and Mitek to determine whether a notification to the Financial Conduct Authority and/or Information Commissioner’s Office is required (a “Notification”);
2.2.2    provide all reasonable assistance and co-operation requested by Mitek and/or Equifax in relation to a Notification or to otherwise investigate the matter.
3.    ACCURACY
3.1    The Client acknowledges and agrees that:
3.1.1    the information forming part of the Output Data is provided to Equifax by third parties over which Equifax does not have control, in particular in relation to the accuracy or completeness of such information;
3.1.2    the volume and nature of the information on Equifax databases makes it impractical for Equifax to verify the information; 
3.1.3    if Equifax were to attempt to verify the Output Data, Equifax would only be able to offer the Information Services to Mitek at significantly increased cost, which would in turn increase the costs paid by the Customer; and
3.1.4    Equifax is not in any circumstances liable to any party for any loss or damage at all arising from any inaccuracies, faults or omissions in, or in the provision of, the Output Data unless caused by Equifax’s negligence or wilful default.
4.    DATA PROTECTION AND TRANSPARENCY
4.1    For the purposes of the data protection regulations, Customer, Equifax, and Mitek shall each be independent controllers of any personal data contained within the input data and Output Data, and Customer shall comply with its obligations under the Data Protection Regulations.
4.2    Without prejudice to the generality of clause 4.1, before providing any input data to Equifax (including via Mitek) or otherwise conducting a search in relation to a consumer, Customer shall:
4.2.1    notify the consumer about whom a search is made that their information will be disclosed to a credit reference agency, which may keep a record of that information and disclose it (and the fact that a search was made) to its other customers, including for the purposes of assessing the risk of giving credit and occasionally to prevent fraud, money laundering and to trace debtors;
4.2.2    make a copy of the CRAIN available to the consumer so that they might understand how the credit reference agencies process their personal data; and
4.2.3    on request (which may be received directly or via Mitek), provide a copy of the notification used to satisfy the obligations of the above to Equifax.
5.    SECURITY AND AUDIT
5.1    Customer shall maintain adequate security measures to protect the integrity, security and confidentiality of all Output Data, including as a minimum by complying with Equifax’s security requirements and policies, as made available by Equifax to Mitek and Customer from time to time.
5.2    Customer shall provide to Mitek and Equifax any information reasonably requested in order to assess whether the Customer’s use of the Information Services and Output Data is in compliance with these terms.
6.    TERMINATION OF SERVICES
6.1    Equifax may cease to make the Output Data available to Mitek for resale to the customer in the event of the following:
6.1.1    the customer commits a material breach of these Terms;
6.1.2    the provision or intended use of Information Services by the customer is or is likely to be or become unlawful due to a change in Applicable Law, regulatory guidance or court ruling.

Previous SKU: MVP-A
The end user may provide photo images of documents to assist in the identification process. The Attachments feature is a file upload facility attached to the Services Request, and clients can define custom labels that tell the end user what documents are required. Captured documents are not subject to any authentication or verification processes. The service is simply image/file capture only.  Only available via low/ no code implementations. Availability:  Global

The following terms shall apply solely to customer's use of Attachments:
The customer agrees that under no circumstances will it encourage or permit consumers to upload images of payment cards through the Attachment service.

The end user may provide photo images of documents to assist in the identification process. The Attachments feature is a file upload facility attached to the Services Request, and clients can define custom labels that tell the end user what documents are required. Captured documents are not subjected to any authentication or verification processes. The service is simply image/file capture only.  Only available via low/ no code implementations.

The customer agrees that under no circumstances will it encourage or permit consumers to upload images of payment cards through the Attachment service.

Previous SKU: MVP-AFA-NOI
Autofill API is used to analyze user information from an uploaded document to short cut the form filling process. The user will not need to fill all of their information like name, address, country, document type, instead they can upload one Proof of Identity document such as their Driver's License, ID, Passport, etc. The document is then processed via the Autofill API and it will return a result to the user to correct and submit. This pricing does not include verification, and is for use when purchased as a stand alone product. This is only applicable to full code implementations. Availability:  Global

Autofill API is used to analyze user information from an uploaded document to short cut the form filling process. The user will not need to fill all of their information like name, address, country, document type, instead they can upload one Proof of Identity document such as their Drivers License, ID, Passport, etc. The document is then processed via the Autofill API and it will return a result to the user to correct and submit. This pricing does not include verification, and is for use when purchased as a stand alone product. This is only applicable to full code implementations.

Autofill API is used to collect/parse user information from an uploaded document to short cut the form filling process. The user will not need to fill all of their information like name, address, country, document type, instead they can upload one Proof of Identity document such as their Driver's License, ID, Passport, etc. The document is then processed via the Autofill API and it will return a result to the user to correct and submit. This pricing is to be used when the customer is also processing the document for verification (which is a separate charge). This is only applicable to full code implementations. Availability: Global

Autofill API is used to collect/parse user information from an uploaded document to short cut the form filling process. The user will not need to fill all of their information like name, address, country, document type, instead they can upload one Proof of Identity document such as their Drivers License, ID, Passport, etc. The document is then processed via the Autofill API and it will return a result to the user to correct and submit. This pricing is to be used when the customer is also processing the document for verification (which is a separate charge). This is only applicable to full code implementations.

Bank Connect Affordability is an extension of customers Bank Connect ID feature with the addition of an affordability report that classifies individual transactions (money in and money out) over time to provide an overview of the account holders cash flow position and category spend.

The customer may use Bank Connect Affordability for ID verification, fraud prevention and for checking that consumers can afford a particular financial transaction. Mitek provides the Bank Connect Affordability service strictly on condition that the customer accepts that Mitek cannot be held responsible for the accuracy of the data provided.

Previous SKU: MVP-BCID
Bank Connect ID allows users to connect to their bank account within the journey along with other items in the scope or as a standalone feature. Provides account summary information such as, user name, phone, email, transaction summary information, card, and account details. Availability:  UK and EU

The following terms shall apply solely to customer's use of Bank Connect ID:
The customer agrees that it will use Bank Connect ID only for ID verification and fraud prevention and will not use it for checking the affordability by consumers of financial transactions.

Bank Connect ID allows user to connect to their bank account within the journey along with other items in the scope or as a standalone feature. Provides account summary information such as, user name, phone, email, transaction summary information, card, and account details.

The customer agrees that it will use Bank Connect ID only for ID verification and fraud prevention and will not use it for checking the affordability by consumers of financial transactions.

Previous SKU: MVP-BCI
Bank Connect Insight is an extension of customer's Bank Connect ID product with the addition of the raw transaction data extracted directly from a customer's account. This is for clients that wish to run their own classification and analysis of money in and out transactions. Availability: UK and EU

The following terms shall apply solely to customer's use of Bank Connect Insight:
The customer may use Bank Connect Insight for ID verification, fraud prevention and for checking that consumers can afford a particular financial transaction. Mitek provides the Bank Connect Insight service strictly on condition that the customer accepts that Mitek cannot be held responsible for the accuracy of the data provided.

Bank Connect Insight is an extension of customers Bank Connect ID product with the addition of the raw transaction data extracted directly from a customers’ account. This is for clients that wish to run their own classification and analysis of money in and out transactions.

The customer may use Bank Connect Insight for ID verification, fraud prevention and for checking that consumers can afford a particular financial transaction. Mitek provides the Bank Connect Insight service strictly on condition that the customer accepts that Mitek cannot be held responsible for the accuracy of the data provided.

Previous SKU: MVP-CO
Biometric matching of selfie images to ID photos extracted from identity documents and profile pictures. The images are used for facial matching against identity document photo images to provide a confidence level that the applicant is the same person as shown in the ID. Availability: Global

Biometric matching of selfie images to ID photos extracted from identity documents and profile pictures. The images are used for facial matching against identity document photo images to provide a confidence level that the applicant is the same person as shown in the ID.

Previous SKU: MVP-CO-API
Biometric matching of selfie images to ID photos extracted from identity documents and profile pictures. The images are used for facial matching against identity document photo images to provide a confidence level that the applicant is the same person as shown in the ID, accessed via API. Availability: Global
 

Biometric matching of selfie images to ID photos extracted from identity documents and profile pictures. The images are used for facial matching against identity document photo images to provide a confidence level that the applicant is the same person as shown in the ID, accessed via API.

Previous SKU: MVP-BL
When an end user is required to pass liveness detection as part of the selfie capture process, our software will capture a series of images of the applicant and process them to determine if the user is physically present during the identity verification process. Availability: Global

When an end user is required to pass liveness detection as part of the selfie capture process, our software will capture a series of images of the applicant and process them to determine if the user is physically present during the identity verification process.

When an end user is required to pass liveness detection as part of the selfie capture process, our software will capture a series of images of the applicant and process them to determine if the user is physically present during the identity verification process, when accessed via API. Availability: Global

When an end user is required to pass liveness detection as part of the selfie capture process, our software will capture a series of images of the applicant and process them to determine if the user is physically present during the identity verification process, when accessed via API.

This service queries a government hosted external API using the "Document Number" parameter to check the status of a given document with that document number. The database only hosts data for Dutch citizens, under the name of “Basis Registratie Personen”, within the Dutch government personal identification register system.

The following supplemental terms shall apply to Customer’s use of the BPR Watchlist service.

1. Definitions

1.1 For the purposes of this product description, the following definition(s) shall apply in addition to any defined terms in the Agreement:

“BIO” means Government Information Security Baseline available at: https://bio-overheid.nl/media/13kduqsi/bio-versie-104zv_def.pdf.

2. Customer Responsibilities

2.1 User management

The customer is responsible for proper user management. Only employees of the customer who need access to BPR - Watchlist in their role are permitted to be users of the service. If access is no longer needed, customer should remove this person as a user immediately (from the moment the role expires). This process must be documented by the customer and verifiable.

2.2 Authentication of the Customer user

The customer user initiating the call to BPR - Watchlist must authenticate. This must be done through:

2.2.1 Multi-factor authentication (MFA), applied according to BIO, H9.4.2; and

2.2.2 Password policies that comply with BIO.

2.3 Unique and persistent pseudonym for end-user identification

When using BPR - Watchlist, the customer must always provide a reference from the user. This is a so-called persistent pseudonym. This should be:

2.3.1 unique for each user and should not enable identification of the user themselves

2.3.2 guaranteed the same for at least the authentication domain; and

2.3.3 remain the same over time user retains usage rights to BPR - Watchlist.

2.4 Instance Codes

Upon registration for BPR - Watchlist, customer will be provided with an instance code from Rijksdienst voor Identiteitsgegevens (“RvIG”) to be used by the customer to identify and authorise the customer to use BPR - Watchlist service.

2.5 Storage of requested data and logging

The following applies to the data requested by the customer through interaction with BPR - Watchlist. The customer should:

2.5.1 only request data for an appropriate purpose;

2.5.2 not request more data than is necessary for this purpose;

2.5.3 use data only for the purpose for which they were requested; and

2.5.4 not keep it longer than necessary to perform the requested function. Given the real-time search capability, in most cases it is not necessary to keep data for a longer period of time. It is always possible to retrieve the data, and this is also the most up-to-date data. The customer’s conclusions based on the data may be recorded as part of the accountability for its own process. The customer may also record that an API has been (successfully) called. This should be done without recording the content of the data.

2.5.5 make BPR - Watchlist data accessible only to users who have rights to do so:

2.5.5.1 for the primarily requested data, these are the processors of that data; and

2.5.5.2 for technical logging of calls and results, these are designated administrators and possibly auditors.

2.5.6 maintain in place adequate measures for authentication, authorization, and encryption.

2.6 Retention periods

BPR - Watchlist data is subject to the following retention periods:

• Data or logs to trace pseudonyms back to original users: two years.

• Data or logs about the technical or incorrect functioning of systems and links: at least 90 days, no longer than two years.

Once the retention periods have expired, the data must be adequately destroyed. To this end, the customer must set up a verifiable process that meets the standards of the BIO.

2.7 Quota/Fair Use

Usage of BPR - Watchlist is monitored by RvIG. RvIG may may suspend the customer’s use of BPR - Watchlist in its sole discretion if it considers the customer’s usage to be excessive or unlawful.

2.8 Security Obligation

The customer is responsible for securing:

2.8.1 systems that are linked to BPR - Watchlist;

2.8.2 access points (links) to BPR - Watchlist; and

2.8.3 storage of data resulting from usage of BPR - Watchlist.

2.9 Reporting incidents

2.9.1 The customer must immediately report any security incident relating to BPR - Watchlist to RvIG via https://www.rvig.nl/contact.

2.9.2 The customer immediately take measures to mitigate any such security incident of which it becomes aware, including any mandated by RvIG.

2.10 Emergencies

In the event of deviations from normal use, RvIG may step up monitoring of BPR - Watchlist. RvIG may also consult with the customer and/or Mitek to prevent abuse of BPR - Watchlist. RvIG may implement measures to address any such situations including suspension or termination of the customer’s access to BPR - Watchlist in such circumstances.

This service queries a government hosted external API using the "Document Number" parameter to check the status of a given document with that document number. The database only hosts data for Dutch citizens, under the name of “Basis Registratie Personen”, within the Dutch government personal identification register system.

The following supplemental terms shall apply to Customer’s use of the BPR Watchlist service.

1. Definitions

1.1 For the purposes of this product description, the following definition(s) shall apply in addition to any defined terms in the Agreement:

“BIO” means Government Information Security Baseline available at: https://bio-overheid.nl/media/13kduqsi/bio-versie-104zv_def.pdf.

2. Customer Responsibilities

2.1 User management

The customer is responsible for proper user management. Only employees of the customer who need access to BPR - Watchlist in their role are permitted to be users of the service. If access is no longer needed, customer should remove this person as a user immediately (from the moment the role expires). This process must be documented by the customer and verifiable.

2.2 Authentication of the Customer user

The customer user initiating the call to BPR - Watchlist must authenticate. This must be done through:

2.2.1 Multi-factor authentication (MFA), applied according to BIO, H9.4.2; and

2.2.2 Password policies that comply with BIO.

2.3 Unique and persistent pseudonym for end-user identification

When using BPR - Watchlist, the customer must always provide a reference from the user. This is a so-called persistent pseudonym. This should be:

2.3.1 unique for each user and should not enable identification of the user themselves

2.3.2 guaranteed the same for at least the authentication domain; and

2.3.3 remain the same over time user retains usage rights to BPR - Watchlist.

2.4 Instance Codes

Upon registration for BPR - Watchlist, customer will be provided with an instance code from Rijksdienst voor Identiteitsgegevens (“RvIG”) to be used by the customer to identify and authorise the customer to use BPR - Watchlist service.

2.5 Storage of requested data and logging

The following applies to the data requested by the customer through interaction with BPR - Watchlist. The customer should:

2.5.1 only request data for an appropriate purpose;

2.5.2 not request more data than is necessary for this purpose;

2.5.3 use data only for the purpose for which they were requested; and

2.5.4 not keep it longer than necessary to perform the requested function. Given the real-time search capability, in most cases it is not necessary to keep data for a longer period of time. It is always possible to retrieve the data, and this is also the most up-to-date data. The customer’s conclusions based on the data may be recorded as part of the accountability for its own process. The customer may also record that an API has been (successfully) called. This should be done without recording the content of the data.

2.5.5 make BPR - Watchlist data accessible only to users who have rights to do so:

2.5.5.1 for the primarily requested data, these are the processors of that data; and

2.5.5.2 for technical logging of calls and results, these are designated administrators and possibly auditors.

2.5.6 maintain in place adequate measures for authentication, authorization, and encryption.

2.6 Retention periods

BPR - Watchlist data is subject to the following retention periods:

• Data or logs to trace pseudonyms back to original users: two years.

• Data or logs about the technical or incorrect functioning of systems and links: at least 90 days, no longer than two years.

Once the retention periods have expired, the data must be adequately destroyed. To this end, the customer must set up a verifiable process that meets the standards of the BIO.

2.7 Quota/Fair Use

Usage of BPR - Watchlist is monitored by RvIG. RvIG may may suspend the customer’s use of BPR - Watchlist in its sole discretion if it considers the customer’s usage to be excessive or unlawful.

2.8 Security Obligation

The customer is responsible for securing:

2.8.1 systems that are linked to BPR - Watchlist;

2.8.2 access points (links) to BPR - Watchlist; and

2.8.3 storage of data resulting from usage of BPR - Watchlist.

2.9 Reporting incidents

2.9.1 The customer must immediately report any security incident relating to BPR - Watchlist to RvIG via https://www.rvig.nl/contact.

2.9.2 The customer immediately take measures to mitigate any such security incident of which it becomes aware, including any mandated by RvIG.

2.10 Emergencies

In the event of deviations from normal use, RvIG may step up monitoring of BPR - Watchlist. RvIG may also consult with the customer and/or Mitek to prevent abuse of BPR - Watchlist. RvIG may implement measures to address any such situations including suspension or termination of the customer’s access to BPR - Watchlist in such circumstances.

Previous SKU: PS-CERT
This service offers mTLS authentication for API communication. We maintain and update the certificates needed for this service. Availability: Global

This service offers mTLS authentication for API communication. We maintain and update the certificates needed for this service.

Previous SKU: PS-DOM
With this service we set our hosted journey domain to one chosen by the customer, and we perform ongoing maintenance to update the domain certificates. Availability: Global

With this service we set our hosted journey domain to one chosen by the customer, and we perform ongoing maintenance to update the domain certificates.

The Digital Fraud Defender (DFD) suite for MiPass provides a holistic set of services to protect biometric reauthentications from injection attacks and deepfakes. This sku provides coverage for unlimited re-verifications through the MiPass service. The services within this suite are sold as a packaged offering and, by default, all fraud prevention services are enabled. However, specific functionality may not be available for all transactions in all regions.

The Digital Fraud Defender (DFD) suite for MiPass provides a holistic set of services to protect biometric reauthentications from injection attacks and deepfakes. This sku is for individual re-verifications through the MiPass service. The services within this suite are sold as a packaged offering and, by default, all fraud prevention services are enabled. However, specific functionality may not be available for all transactions in all regions.

The Digital Fraud Defender (DFD) suite provides a holistic set of services to protect IDV transactions against injection attacks, deepfake attacks, and template attacks by leveraging capabilities to detect virtual cameras and emulators, digital manipulation, velocity attacks and more. The services within this suite are sold as a packaged offering and, by default, all fraud prevention services are enabled. However, specific functionality may not be available for all transactions in all regions.

The Digital Fraud Defender (DFD) suite provides a holistic set of services to protect IDV transactions against injection attacks, deepfake attacks, and template attacks by leveraging capabilities to detect virtual cameras and emulators, digital manipulation, velocity attacks and more. The services within this suite are sold as a packaged offering and, by default, all fraud prevention services are enabled. However, specific functionality may not be available for all transactions in all regions. Availability: Global

The Digital Fraud Defender (DFD) suite provides a holistic set of services to protect IDV transactions against injection attacks, deepfake attacks, and template attacks by leveraging capabilities to detect virtual cameras and emulators, digital manipulation, velocity attacks and more. The services within this suite are sold as a packaged offering and, by default, all fraud prevention services are enabled. However, specific functionality may not be available for all transactions in all regions. Availability: Global

Face Velocity is part of the Duplicate Identity Scan (DIS) suite of features and serves to identify rapid repeat attacks which is common among fraud rings. Face Velocity adds the selfie image from every IDV transaction (or portrait if no selfie provided) to a customer gallery and searches that gallery for prior transactions that included the same face. It then returns information about prior matching transactions and, optionally, rejects the current transaction if too many matches were found. This is the pricing if used/ purchased with the Biometric Compare service. *Note: DIS is not available to customers residing in Illinois, Texas, United Kingdom, and the European Union at this time.

Duplicate Identity Scan (DIS) includes both the Face Velocity and Known Faces Gallery features. Face Velocity serves to identify rapid repeat attacks which are common among fraud rings. Face Velocity adds the selfie image from every IDV transaction (or portrait if no selfie is provided) to a customer gallery and searches that gallery for prior transactions that included the same face. It then returns information about prior matching transactions and, optionally, rejects the current transaction if too many matches were found. The Face Gallery feature is a complimentary component allowing customers to add known bad actors to a separate gallery and searches that gallery for matches against new transactions, optionally rejecting the transaction if a match is found. This is the pricing if used/purchased with the Biometric Compare service. *Note: DIS is not available to customers residing in Illinois, Texas and Quebec at this time.

Face Velocity is part of the Duplicate Identity Scan (DIS) suite of features and serves to identify rapid repeat attacks which is common among fraud rings. Face Velocity adds the selfie image from every IDV transaction (or portrait if no selfie provided) to a customer gallery and searches that gallery for prior transactions that included the same face. It then returns information about prior matching transactions and, optionally, rejects the current transaction if too many matches were found. This is the pricing if DIS is used in isolation from a Biometric Compare check. *Note: DIS is not available to customers residing in Illinois, Texas, United Kingdom, and the European Union at this time.

Face Velocity is part of the Duplicate Identity Scan (DIS) suite of features and serves to identify rapid repeat attacks which are common among fraud rings. Face Velocity adds the selfie image from every IDV transaction (or portrait if no selfie is provided) to a customer gallery and searches that gallery for prior transactions that included the same face. It then returns information about prior matching transactions and, optionally, rejects the current transaction if too many matches were found. This is the pricing if DIS is used in isolation from a Biometric Compare check. The Face Gallery feature is not available for portrait images. *Note: DIS is not available for use with customers residing in Illinois, Texas, or Quebec at this time.

Mitek provides the RDW data lookup service for Dutch driving licenses to support validity checks and lost-and-stolen screening. This feature can be enabled for customers who opt in, provided they have offices in the Netherlands.

Previous SKU: MVP-EM-RS
By leveraging a global email fraud database, the email reputation signal analyzes the email address's account activity, lifespan, and other factors to provide risk scoring for the email address. Within this solution, phone scoring is provided covering carrier type, status, and cross matching of phone number to identity details. IP address & domain risk scoring is also provided. Availability: Global

The following supplemental terms shall apply solely to customer’s use of E-Mail Reputation.

1. DEFINITIONS

“Lexis Nexis” means Lexis Nexis Risk Solutions UK and its affiliates.

“Services” means the Email Reputation services.

“User(s)” means individuals who are authorized to use the Services. Users may include, but are not limited to the employees, consultants, contractors, and agents of customer.

2. USE OF THE SERVICES

2.1 Credentials are for designated Users only and cannot be shared or used by more than one User but may be reassigned to an alternative User replacing User who no longer requires ongoing use of the Services.

2.2 Customer is responsible for (i) Users’ compliance with these terms, (ii) using commercially reasonable efforts to prevent unauthorized access to or use of the Services, (iii) using the Services only in accordance with the applicable user guide (if any), applicable laws and government regulations; and (iv) verifying that each User acts as an end user. Client should promptly report system failures, unauthorized access or use of the Services and security breaches to Mitek.

2.3 Customer shall use Services solely for fraud prevention purposes.

2.4 Upon request, customer will cooperate with Mitek in order to confirm that it has a permissible purpose for receiving the Services, and otherwise complies with applicable laws and any policies requested by Mitek. Customer permits Mitek to disclose information and records of its investigation to Lexis Nexis if requested by Lexis Nexis.

2.5 In the event Mitek or Lexis Nexis:

a) reasonably believes and can evidence that customer’s use of the Services exceeds agreed usage limits, Mitek may limit the number of queries that may be submitted to the Services (i.e., throttle the Services), and place other technical limitations on use of the Services as may be reasonable in the circumstances;

b) reasonably believes in good faith that customer is in violation of the terms of this Agreement, or that their access or usage has had or may have a materially negative impact on the Services, Lexis Nexis or Mitek may suspend customer’s access to the Services, or limit the number of queries that may be submitted to the Services (i.e., throttle the Services) and place other technical limitations on use of the Services as may be reasonable in the circumstances.

2.6 Unless it is unreasonable or impossible to do so, prior to any such suspension or limiting as set out in paragraph 2.5 above, Mitek will give written notice of such to customer. Any such constraints shall be removed promptly once the situation which gave rise to the use of such constraints has been resolved.

3. AUDIT

Remote Audit: Lexis Nexis or Mitek may carry out appropriate checks of customer’s access to and use of the Services on a remote basis and customer agrees to cooperate with any and all requests for such checks and to respond to any enquiries within fifteen (15) business days.

4. DISCLAIMER

EXCEPT AS EXPRESSLY PROVIDED ABOVE, LEXIS NEXIS EXPRESSLY DISCLAIMS ANY AND ALL REPRESENTATIONS, WARRANTIES, AND CONDITIONS, INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED WARRANTY OF MERCHANTABILITY, AVAILABILITY, SECURITY, TITLE, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT AND THE SERVICES ARE PROVIDED “AS IS,” AT CUSTOMER’S OWN RISK. NEITHER MITEK NOR LEXIS NEXIS REPRESENT OR WARRANT THAT THE SERVICES OR SERVICE DATA ARE FREE OF INACCURACIES, ERRORS, BUGS, OR INTERRUPTIONS, OR ARE RELIABLE, COMPLETE, OR OTHERWISE ACCURATE.

By leveraging a global email fraud database, the email reputation signal analyzes the email addresses account activity, lifespan, and other factors to provide risk scoring for the email address. Within this solution, phone scoring is provided covering carrier type, status, and cross matching of phone number to identity details. IP address & domain risk scoring is also provided.

The following supplemental terms shall apply solely to customer’s use of E-Mail Reputation.

1. DEFINITIONS

“Lexis Nexis” means Lexis Nexis Risk Solutions UK and its affiliates.

“Services” means the Email Reputation services.

“User(s)” means individuals who are authorized to use the Services. Users may include, but are not limited to the employees, consultants, contractors, and agents of customer.

2. USE OF THE SERVICES

2.1 Credentials are for designated Users only and cannot be shared or used by more than one User but may be reassigned to an alternative User replacing User who no longer requires ongoing use of the Services.

2.2 Customer is responsible for (i) Users’ compliance with these terms, (ii) using commercially reasonable efforts to prevent unauthorized access to or use of the Services, (iii) using the Services only in accordance with the applicable user guide (if any), applicable laws and government regulations; and (iv) verifying that each User acts as an end user. Client should promptly report system failures, unauthorized access or use of the Services and security breaches to Mitek.

2.3 Customer shall use Services solely for fraud prevention purposes.

2.4 Upon request, customer will cooperate with Mitek in order to confirm that it has a permissible purpose for receiving the Services, and otherwise complies with applicable laws and any policies requested by Mitek. Customer permits Mitek to disclose information and records of its investigation to Lexis Nexis if requested by Lexis Nexis.

2.5 In the event Mitek or Lexis Nexis:

a) reasonably believes and can evidence that customer’s use of the Services exceeds agreed usage limits, Mitek may limit the number of queries that may be submitted to the Services (i.e., throttle the Services), and place other technical limitations on use of the Services as may be reasonable in the circumstances;

b) reasonably believes in good faith that customer is in violation of the terms of this Agreement, or that their access or usage has had or may have a materially negative impact on the Services, Lexis Nexis or Mitek may suspend customer’s access to the Services, or limit the number of queries that may be submitted to the Services (i.e., throttle the Services) and place other technical limitations on use of the Services as may be reasonable in the circumstances.

2.6 Unless it is unreasonable or impossible to do so, prior to any such suspension or limiting as set out in paragraph 2.5 above, Mitek will give written notice of such to customer. Any such constraints shall be removed promptly once the situation which gave rise to the use of such constraints has been resolved.

3. AUDIT

Remote Audit: Lexis Nexis or Mitek may carry out appropriate checks of customer’s access to and use of the Services on a remote basis and customer agrees to cooperate with any and all requests for such checks and to respond to any enquiries within fifteen (15) business days.

4. DISCLAIMER

EXCEPT AS EXPRESSLY PROVIDED ABOVE, LEXIS NEXIS EXPRESSLY DISCLAIMS ANY AND ALL REPRESENTATIONS, WARRANTIES, AND CONDITIONS, INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED WARRANTY OF MERCHANTABILITY, AVAILABILITY, SECURITY, TITLE, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT AND THE SERVICES ARE PROVIDED “AS IS,” AT CUSTOMER’S OWN RISK. NEITHER MITEK NOR LEXIS NEXIS REPRESENT OR WARRANT THAT THE SERVICES OR SERVICE DATA ARE FREE OF INACCURACIES, ERRORS, BUGS, OR INTERRUPTIONS, OR ARE RELIABLE, COMPLETE, OR OTHERWISE ACCURATE.

Global support for queries, issues and operational changes. Included is 24x7x365 incident support.

The customer health check will provide an assessment of the customer's current implementation. Included is a report containing a detailed analysis of the findings, recommendations, and implementation guidance to improve the health of the implementation.

Previous SKU: MVP-ID-SCR
Provides the ability to calculate a GPG45 score based on the results achieved from a Data Check in conjunction with a document and liveness check. The results will vary based on the Strength, Validity, Activity, Fraud, and Verification scores gained in the process and the method of capture. For example, NFC capture of a passport will gain a higher Strength and Validity score than a simple image capture. The Data Search will return varying scores, so using the "Data Search First" logic, journeys can vary in the requirements needed to pass a certain score (ex. whether one ID document is required or two). Data Searches can only be carried out on UK Addresses. Availability: UK only

Provides the ability to calculate a GPG45 score based on the results achieved from a Data Check in conjunction with a document and liveness check. The results will vary based on the Strength, Validity, Activity, Fraud, and Verification scores gained in the process and the method of capture. For example, NFC capture of a passport will gain a higher Strength and Validity score than a simple image capture. The Data Search will return varying scores, so using the "Data Search First" logic, journeys can vary in the requirements needed to pass a certain score (ex. whether one ID document is required or two). Data Searches can only be carried out on UK Addresses.

Identity Verification Transaction. Only available for hosted journey with low code & no code implementation types. Availability: Global

Identity Verification Transaction started on the hosted journey where end-user has accepted terms & conditions to continue the verification process. Only available on the hosted journey (Low code/No Code implementation types). Availability: Global

Captures images via mobile web or native apps for use with ID R&D server-side products, including built-in image quality assessment. Provided as SDKs for web, iOS, and Android.

Creates facial templates from images meeting documented requirements and compares them to assess if they belong to the same person. Delivered as a Docker image.

Analyzes ID document images to detect digital alterations made with editing tools or deep learning models. Returns a probability score indicating if the portrait photo is authentic. Designed for mobile capture and delivered as a Docker image.

Analyzes ID document images to detect if the portrait photo has been overlaid with another headshot. Returns a probability score indicating authenticity. Designed for mobile capture and delivered as a Docker image.

Analyzes ID document images from a mobile camera to detect photocopies, including full-page scans or cut-outs. Returns a probability score indicating if the image is of a genuine physical document. Delivered as a Docker image.

Analyzes ID document images captured via a mobile back camera to detect screen replays versus real physical documents. Returns a probability score and is delivered as a Docker image.

Analyzes a single selfie to detect spoofing and injection attacks, such as masks, replays, or images bypassing live camera capture. Supports web, iOS, and Android capture. Provided as a Docker image with a client SDK.

Analyzes a single selfie to detect spoofing attacks, including deepfakes and AI-generated images. Available as a Docker image or SDK for Windows and Linux.

Detects whether a single selfie image is genuine or a spoof (e.g., photo-of-a-photo or mask). Available as a Docker image or SDK for Windows and Linux.

This fee is charged on a per user, per year basis and includes unlimited reverifications using a user's stored biometric template. Their face and/or voice biometrics will be compared to the enrolled template to determine if it is the same user. This service can be offered via API or hosted journey.

Analyzes audio with 16 kHz sampling rate to assess whether the sample is a synthetically generated clone of a voice or not. Available for iOS, Android, Linux, Windows, or as a Docker image.

Detects whether microphone audio comes from a live speaker or a playback device using 8 kHz+ voice samples. Available for iOS, Android, Linux, Windows, or as a Docker image.

Previous SKU: MVP-IDV
This feature provides summary Name, Address and Date of Birth confirmation. This service can be used for any identity confirmation purpose however it does leave an ID (Non Credit) search footprint on the consumer's credit file. This product does not return detailed information about the records and in some cases will only return a 0 or a 1 indicating there is at least 1 match on the relevant register. Availability: UK only

The following terms shall apply solely to customer's use of Equifax Credit Reference Checks.

“CRAIN” means the Credit Reference Agency (CRA) Information Notice, the industry standard privacy information policy adopted by the leading UK CRAs (a copy of which can be found here: https://www.equifax.co.uk/crain), and as may be updated from time to time;
“Equifax” means Equifax Limited, a company incorporated and registered in England and Wales with company number 2425920 registered office is at 1 Angel Court, London, EC2R 7HJ;
“Information Services” means any services (including the provision of Output Data) provided by Equifax that the customer is authorised to receive via Mitek.
“Output Data” means any information or data provided by Equifax that the customer is authorised to receive via Mitek;
“Resale Agreement” the agreement between Equifax and Mitek, under which Mitek is permitted to resell the Information Services and Output Data;
“Search” means a search made of Equifax’s database (including via Mitek) for the purpose of obtaining information in relation to an individual or corporate entity;
1. PERMITTED USE
1.1 The customer shall only use the Output Data;
1.1.1 in compliance with all applicable laws;
1.1.2 solely as permitted in the Agreement; and
1.1.3 otherwise in compliance with these terms.
1.2 The customer must not:
1.2.1 resell or offer to resell any of the Output Data; or
1.2.2 disclose to any other person any of the Output Data, except:
1.2.2.1 when required to do so by law or any regulatory authority, including following a subject access request submitted by a consumer to whom the data relates; or
1.2.2.2 to the customer’s personnel whose duties reasonably require such disclosure, on condition that the customer ensures that each such person to whom such disclosure is made, is informed of the customer’s obligation of confidentiality and non-disclosure, and are subject to equivalent obligations.

2. AUTHENTICATION
2.1 NOT USED
2.2 The customer acknowledges that a failure to properly validate and authenticate a consumer may result in the use and/or disclosure of consumer data in breach of applicable law including the UK Data Protection Law, potentially requiring the involvement of the Financial Conduct Authority and/or the Information Commissioner’s Office. Accordingly, to the extent that the customer becomes aware of or reasonably suspects that a consumer has not been properly authenticated or is not the person they purported to be, the customer will:
2.2.1 immediately notify Equifax (which may be given via Mitek) and provide all relevant details available to enable Equifax and Mitek to determine whether a notification to the Financial Conduct Authority and/or Information Commissioner’s Office is required (a “Notification”);
2.2.2 provide all reasonable assistance and co-operation requested by Mitek and/or Equifax in relation to a Notification or to otherwise investigate the matter.
3. ACCURACY
3.1 The Client acknowledges and agrees that:
3.1.1 the information forming part of the Output Data is provided to Equifax by third parties over which Equifax does not have control, in particular in relation to the accuracy or completeness of such information;
3.1.2 the volume and nature of the information on Equifax databases makes it impractical for Equifax to verify the information;
3.1.3 if Equifax were to attempt to verify the Output Data, Equifax would only be able to offer the Information Services to Mitek at significantly increased cost, which would in turn increase the costs paid by the Customer; and
3.1.4 Equifax is not in any circumstances liable to any party for any loss or damage at all arising from any inaccuracies, faults or omissions in, or in the provision of, the Output Data unless caused by Equifax’s negligence or wilful default.
4. DATA PROTECTION AND TRANSPARENCY
4.1 For the purposes of the data protection regulations, Customer, Equifax, and Mitek shall each be independent controllers of any personal data contained within the input data and Output Data, and Customer shall comply with its obligations under the Data Protection Regulations.
4.2 Without prejudice to the generality of clause 4.1, before providing any input data to Equifax (including via Mitek) or otherwise conducting a search in relation to a consumer, Customer shall:
4.2.1 notify the consumer about whom a search is made that their information will be disclosed to a credit reference agency, which may keep a record of that information and disclose it (and the fact that a search was made) to its other customers, including for the purposes of assessing the risk of giving credit and occasionally to prevent fraud, money laundering and to trace debtors;
4.2.2 make a copy of the CRAIN available to the consumer so that they might understand how the credit reference agencies process their personal data; and
4.2.3 on request (which may be received directly or via Mitek), provide a copy of the notification used to satisfy the obligations of the above to Equifax.
5. SECURITY AND AUDIT
5.1 Customer shall maintain adequate security measures to protect the integrity, security and confidentiality of all Output Data, including as a minimum by complying with Equifax’s security requirements and policies, as made available by Equifax to Mitek and Customer from time to time.
5.2 Customer shall provide to Mitek and Equifax any information reasonably requested in order to assess whether the Customer’s use of the Information Services and Output Data is in compliance with these terms.
6. TERMINATION OF SERVICES
6.1 Equifax may cease to make the Output Data available to Mitek for resale to the customer in the event of the following:
6.1.1 the customer commits a material breach of these Terms;
6.1.2 the provision or intended use of Information Services by the customer is or is likely to be or become unlawful due to a change in Applicable Law, regulatory guidance or court ruling.

This feature provides summary Name, Address and Date of Birth confirmation. This service can be used for any identity confirmation purpose however it does leave an ID (Non Credit) search footprint on the consumers credit file. This product does not return detailed information about the records and in some cases will only return a 0 or a 1 indicating there is at least 1 match on the relevant register.

The following terms shall apply solely to customer's use of Equifax Credit Reference Checks.

“CRAIN” means the Credit Reference Agency (CRA) Information Notice, the industry standard privacy information policy adopted by the leading UK CRAs (a copy of which can be found here: https://www.equifax.co.uk/crain), and as may be updated from time to time;
“Equifax” means Equifax Limited, a company incorporated and registered in England and Wales with company number 2425920 registered office is at 1 Angel Court, London, EC2R 7HJ;
“Information Services” means any services (including the provision of Output Data) provided by Equifax that the customer is authorised to receive via Mitek.
“Output Data” means any information or data provided by Equifax that the customer is authorised to receive via Mitek; 
“Resale Agreement” the agreement between Equifax and Mitek, under which Mitek is permitted to resell the Information Services and Output Data;
“Search” means a search made of Equifax’s database (including via Mitek) for the purpose of obtaining information in relation to an individual or corporate entity;
1.    PERMITTED USE
1.1    The customer shall only use the Output Data;
1.1.1    in compliance with all applicable laws;
1.1.2    solely as permitted in the Agreement; and
1.1.3    otherwise in compliance with these terms. 
1.2    The customer must not:
1.2.1    resell or offer to resell any of the Output Data; or
1.2.2    disclose to any other person any of the Output Data, except:
1.2.2.1    when required to do so by law or any regulatory authority, including following a subject access request submitted by a consumer to whom the data relates; or
1.2.2.2    to the customer’s personnel whose duties reasonably require such disclosure, on condition that the customer ensures that each such person to whom such disclosure is made, is informed of the customer’s obligation of confidentiality and non-disclosure, and are subject to equivalent obligations.

2.    AUTHENTICATION
2.1    NOT USED
2.2    The customer acknowledges that a failure to properly validate and authenticate a consumer may result in the use and/or disclosure of consumer data in breach of applicable law including the UK Data Protection Law, potentially requiring the involvement of the Financial Conduct Authority and/or the Information Commissioner’s Office.  Accordingly, to the extent that the customer becomes aware of or reasonably suspects that a consumer has not been properly authenticated or is not the person they purported to be, the customer will:
2.2.1    immediately notify Equifax (which may be given via Mitek) and provide all relevant details available to enable Equifax and Mitek to determine whether a notification to the Financial Conduct Authority and/or Information Commissioner’s Office is required (a “Notification”);
2.2.2    provide all reasonable assistance and co-operation requested by Mitek and/or Equifax in relation to a Notification or to otherwise investigate the matter.
3.    ACCURACY
3.1    The Client acknowledges and agrees that:
3.1.1    the information forming part of the Output Data is provided to Equifax by third parties over which Equifax does not have control, in particular in relation to the accuracy or completeness of such information;
3.1.2    the volume and nature of the information on Equifax databases makes it impractical for Equifax to verify the information; 
3.1.3    if Equifax were to attempt to verify the Output Data, Equifax would only be able to offer the Information Services to Mitek at significantly increased cost, which would in turn increase the costs paid by the Customer; and
3.1.4    Equifax is not in any circumstances liable to any party for any loss or damage at all arising from any inaccuracies, faults or omissions in, or in the provision of, the Output Data unless caused by Equifax’s negligence or wilful default.
4.    DATA PROTECTION AND TRANSPARENCY
4.1    For the purposes of the data protection regulations, Customer, Equifax, and Mitek shall each be independent controllers of any personal data contained within the input data and Output Data, and Customer shall comply with its obligations under the Data Protection Regulations.
4.2    Without prejudice to the generality of clause 4.1, before providing any input data to Equifax (including via Mitek) or otherwise conducting a search in relation to a consumer, Customer shall:
4.2.1    notify the consumer about whom a search is made that their information will be disclosed to a credit reference agency, which may keep a record of that information and disclose it (and the fact that a search was made) to its other customers, including for the purposes of assessing the risk of giving credit and occasionally to prevent fraud, money laundering and to trace debtors;
4.2.2    make a copy of the CRAIN available to the consumer so that they might understand how the credit reference agencies process their personal data; and
4.2.3    on request (which may be received directly or via Mitek), provide a copy of the notification used to satisfy the obligations of the above to Equifax.
5.    SECURITY AND AUDIT
5.1    Customer shall maintain adequate security measures to protect the integrity, security and confidentiality of all Output Data, including as a minimum by complying with Equifax’s security requirements and policies, as made available by Equifax to Mitek and Customer from time to time.
5.2    Customer shall provide to Mitek and Equifax any information reasonably requested in order to assess whether the Customer’s use of the Information Services and Output Data is in compliance with these terms.
6.    TERMINATION OF SERVICES
6.1    Equifax may cease to make the Output Data available to Mitek for resale to the customer in the event of the following:
6.1.1    the customer commits a material breach of these Terms;
6.1.2    the provision or intended use of Information Services by the customer is or is likely to be or become unlawful due to a change in Applicable Law, regulatory guidance or court ruling.

Enables voice-based identity verification by creating and comparing biometric voice templates from 8 kHz phone audio using passphrase or natural speech. Accuracy depends on template quality, audio duration, and signal clarity. Deployable on Linux, Windows, or as a Docker image.

Generates biometric voice templates from 16 kHz+ audio for identity verification using passphrase or natural speech. Supports iOS, Android, Linux, Windows, and as a Docker image.

This is our mid-tier professional service offering enabling customers to integrate document, biometric verification as part of their identity verification solution. The services include planning and training sessions for backend API integrations and omni-channel software integration for both document verification and Mobile Verify - Biometric, UX/UI design guidance for use within 3 months; Backend API support includes both automated and agent document verification APIs as well as automated Mobile Verify ? Biometric APIs. The package includes additional professional services training and implementation guidance for add-on modules such as NFC, Mobile Docs and Mobile Fill. The package also includes additional upgrade support for newer releases of Mobile Verify and / or software within the 3 months.

This is our most advanced professional service offering. The service includes planning and training sessions for backend API integrations and omni-channel software integration for both document verification and Mobile Verify - Biometric, UX/UI design guidance for use within 6 months; Backend API support includes both automated and agent document verification APIs as well as automated Mobile Verify ? Biometric APIs. The package includes additional professional services training and implementation guidance for add-on modules such as NFC, Mobile Docs and Mobile Fill. The package also includes additional upgrade support for newer releases of Mobile Verify and / or software within the 6 months.

This is our basic professional service offering enabling customers to integrate document verification as part of their identity verification solution. The services include remote / online planning and training sessions for backend API integrations and omni-channel software integration for Identity document verification only, UX/UI design guidance for use within 3 months; Backend API support includes both automated or agent document verification APIs.

The Component implementation package provides support for any biometric component product. Up to 20 hours of PS hours included.

Previous SKU: PS-FC
The Full-Code implementation package provides up to 6 months of support by a dedicated resource from Mitek's Professional Services Team.  The program supports all phases of delivery starting from project Kickoff to 30-days past Go-live. Training will include any purchased products on any platform, service APIs, and standalone client-side SDKs. Software development is required by the customer to accomplish this implementation.  Total Professional Support time is directly dependent on scope and ACV amount. Availability: Global

The Full-Code implementation package provides up to 6 months of support with a dedicated resource from Mitek's Professional Services Team.  The program supports all phases of delivery including an official kick-off call and a planning session. The training scope will include any purchased offerings within Mitek's product suite including platforms,  service APIs, and standalone client-side SDKs.  Software development is required by the customer to accomplish this implementation.  Total Professional Support time is up to 80 hours dependent on scope and ACV.

Provides setup and configuration support for Partner's end customer.

Previous SKU: PS-LC
The Low-Code implementation package provides up to 4 months of support with a dedicated resource from Mitek's Professional Services Team. The program supports all phases of delivery including an official kick-off call and a planning session. Training will focus on the Mitek Verified Identity Platform (MiVIP) including best practices for building and managing a hosted customer user journey. Guidance will continue during the design and deploy stages and will conclude 30-days after customer 'Go Live'. Software development is required by the customer to accomplish this implementation that specifically includes using the Create/Send API and managing the Callback responses. Total Professional Support time is 40 hours. Availability: Global

The Low-Code implementation package provides up to 12 weeks of support with a dedicated resource from Mitek's Professional Services Team.  The program supports all phases of delivery including an official kick-off call and a planning session. Training will focus on the Mitek Verified Identity Platform (MiVIP) including best practices for building and managing a hosted customer user journey.  Guidance will continue during the design and deploy stages and will conclude 30-days after customer 'Go Live'. A minimum amount of software development is required by the customer to accomplish this implementation that specifically includes using the Create/Send API and managing the Callback responses only. Total Professional Support time is 40 hours.

Previous SKU: PS-NC
The No-Code implementation package provides up to 8 weeks of support with a dedicated resource from Mitek's Professional Services Team. The program supports all phases of delivery including a Kickoff call and a planning session. Training will focus on the MiVIP Platform including best practices for building and managing a hosted customer User Journey. Guidance will continue during the Design and Deploy stages and will conclude 30-days after customer Go Live. No software development is required to accomplish a complete deployment to a Production environment. Total PS Support time is 20 hours. Availability: Global

The No-Code implementation package provides up to 6 weeks of support with a dedicated resource from Mitek's Professional Services Team. The program supports all phases of delivery including a Kickoff call and a planning session. Training will focus on the MiVIP Platform including best practices for building and managing a hosted customer User Journey. Guidance will continue during the Design and Deploy stages and will conclude 30-days after customer Go Live. No software development is required to accomplish a complete deployment to a Production environment. Total PS Support time is 20 hours.

The upgrade implementation package provides  upgrades to existing customer implementations with other Mitek Products including but not limited to DFD, MiSnap, and APIs. Up to 20 hours of PS hours included.

Analyzes images from ID R&D's mobile web, iOS, and Android capture to detect camera bypass when using a mobile device's back camera. Delivered as a Docker image with a client SDK.

Analyzes images from ID R&D's capture process (web, iOS, Android) to detect camera bypass attempts. Delivered as a Docker image with a client SDK.

KYB signals provide information to verify businesses and UBOs. This information includes global company data, directors and shareholders, financials and linkages. Countries are bundled into regional signals. *Regional signals carry separate prices.

KYB signals provide information to verify businesses and UBOs. This information includes global company data, directors and shareholders, financials and linkages. Countries are bundled into regional signals. *Regional signals carry separate prices.

KYB signals provide information to verify businesses and UBOs. This information includes global company data, directors and shareholders, financials and linkages. Countries are bundled into regional signals. *Regional signals carry separate prices.

KYB signals provide information to verify businesses and UBOs. This information includes global company data, directors and shareholders, financials and linkages. Countries are bundled into regional signals. *Regional signals carry separate prices.

KYB signals provide information to verify businesses and UBOs. This information includes global company data, directors and shareholders, financials and linkages. Countries are bundled into regional signals. *Regional signals carry separate prices.

KYB signals provide information to verify businesses and UBOs. This information includes global company data, directors and shareholders, financials and linkages. Countries are bundled into regional signals. *Regional signals carry separate prices.

KYB signals provide information to verify businesses and UBOs. This includes global company data, directors and shareholders, financials, and linkages, as available. Countries are grouped, and each group incurs a distinct pricing rate. A current list of countries in each group is available in the applicable pricing schedule or by request.

KYB signals provide information to verify businesses and UBOs. This includes global company data, directors and shareholders, financials, and linkages, as available. Countries are grouped, and each group incurs a distinct pricing rate. A current list of countries in each group is available in the applicable pricing schedule or by request.

KYB signals provide information to verify businesses and UBOs. This includes global company data, directors and shareholders, financials, and linkages, as available. Countries are grouped, and each group incurs a distinct pricing rate. A current list of countries in each group is available in the applicable pricing schedule or by request.

KYB signals provide information to verify businesses and UBOs. This includes global company data, directors and shareholders, financials, and linkages, as available. Countries are grouped, and each group incurs a distinct pricing rate. A current list of countries in each group is available in the applicable pricing schedule or by request.

KYB signals provide information to verify businesses and UBOs. This includes global company data, directors and shareholders, financials, and linkages, as available. Countries are grouped, and each group incurs a distinct pricing rate. A current list of countries in each group is available in the applicable pricing schedule or by request.

Previous SKU: MVP-KYC
KYC - Provides summary information of the IDV service with the added transparency of returning the detailed records for public register information, and a summary or count of the Credit Bureau shared register. This service does leave an ID (Non Credit) search footprint on the consumer's credit file and therefore is restricted to customers who need to verify "Inbound Financial Transactions”.

The following terms shall apply solely to customer's use of Equifax Credit Reference Checks.

“CRAIN” means the Credit Reference Agency (CRA) Information Notice, the industry standard privacy information policy adopted by the leading UK CRAs (a copy of which can be found here: https://www.equifax.co.uk/crain), and as may be updated from time to time;
“Equifax” means Equifax Limited, a company incorporated and registered in England and Wales with company number 2425920 registered office is at 1 Angel Court, London, EC2R 7HJ;
“Information Services” means any services (including the provision of Output Data) provided by Equifax that the customer is authorised to receive via Mitek.
“Output Data” means any information or data provided by Equifax that the customer is authorised to receive via Mitek;
“Resale Agreement” the agreement between Equifax and Mitek, under which Mitek is permitted to resell the Information Services and Output Data;
“Search” means a search made of Equifax’s database (including via Mitek) for the purpose of obtaining information in relation to an individual or corporate entity;
1. PERMITTED USE
1.1 The customer shall only use the Output Data;
1.1.1 in compliance with all applicable laws;
1.1.2 solely as permitted in the Agreement; and
1.1.3 otherwise in compliance with these terms.
1.2 The customer must not:
1.2.1 resell or offer to resell any of the Output Data; or
1.2.2 disclose to any other person any of the Output Data, except:
1.2.2.1 when required to do so by law or any regulatory authority, including following a subject access request submitted by a consumer to whom the data relates; or
1.2.2.2 to the customer’s personnel whose duties reasonably require such disclosure, on condition that the customer ensures that each such person to whom such disclosure is made, is informed of the customer’s obligation of confidentiality and non-disclosure, and are subject to equivalent obligations.

2. AUTHENTICATION
2.1 NOT USED
2.2 The customer acknowledges that a failure to properly validate and authenticate a consumer may result in the use and/or disclosure of consumer data in breach of applicable law including the UK Data Protection Law, potentially requiring the involvement of the Financial Conduct Authority and/or the Information Commissioner’s Office. Accordingly, to the extent that the customer becomes aware of or reasonably suspects that a consumer has not been properly authenticated or is not the person they purported to be, the customer will:
2.2.1 immediately notify Equifax (which may be given via Mitek) and provide all relevant details available to enable Equifax and Mitek to determine whether a notification to the Financial Conduct Authority and/or Information Commissioner’s Office is required (a “Notification”);
2.2.2 provide all reasonable assistance and co-operation requested by Mitek and/or Equifax in relation to a Notification or to otherwise investigate the matter.
3. ACCURACY
3.1 The Client acknowledges and agrees that:
3.1.1 the information forming part of the Output Data is provided to Equifax by third parties over which Equifax does not have control, in particular in relation to the accuracy or completeness of such information;
3.1.2 the volume and nature of the information on Equifax databases makes it impractical for Equifax to verify the information;
3.1.3 if Equifax were to attempt to verify the Output Data, Equifax would only be able to offer the Information Services to Mitek at significantly increased cost, which would in turn increase the costs paid by the Customer; and
3.1.4 Equifax is not in any circumstances liable to any party for any loss or damage at all arising from any inaccuracies, faults or omissions in, or in the provision of, the Output Data unless caused by Equifax’s negligence or wilful default.
4. DATA PROTECTION AND TRANSPARENCY
4.1 For the purposes of the data protection regulations, Customer, Equifax, and Mitek shall each be independent controllers of any personal data contained within the input data and Output Data, and Customer shall comply with its obligations under the Data Protection Regulations.
4.2 Without prejudice to the generality of clause 4.1, before providing any input data to Equifax (including via Mitek) or otherwise conducting a search in relation to a consumer, Customer shall:
4.2.1 notify the consumer about whom a search is made that their information will be disclosed to a credit reference agency, which may keep a record of that information and disclose it (and the fact that a search was made) to its other customers, including for the purposes of assessing the risk of giving credit and occasionally to prevent fraud, money laundering and to trace debtors;
4.2.2 make a copy of the CRAIN available to the consumer so that they might understand how the credit reference agencies process their personal data; and
4.2.3 on request (which may be received directly or via Mitek), provide a copy of the notification used to satisfy the obligations of the above to Equifax.
5. SECURITY AND AUDIT
5.1 Customer shall maintain adequate security measures to protect the integrity, security and confidentiality of all Output Data, including as a minimum by complying with Equifax’s security requirements and policies, as made available by Equifax to Mitek and Customer from time to time.
5.2 Customer shall provide to Mitek and Equifax any information reasonably requested in order to assess whether the Customer’s use of the Information Services and Output Data is in compliance with these terms.
6. TERMINATION OF SERVICES
6.1 Equifax may cease to make the Output Data available to Mitek for resale to the customer in the event of the following:
6.1.1 the customer commits a material breach of these Terms;
6.1.2 the provision or intended use of Information Services by the customer is or is likely to be or become unlawful due to a change in Applicable Law, regulatory guidance or court ruling.

Provides summary information of the IDV service with the added transparency of returning the detailed records for public register information, and a summary or count of the Credit Bureau shared register. This service does leave an ID (Non Credit) search footprint on the consumers credit file and therefore is restricted to customers who need to verify "Inbound Financial Transactions".

The following terms shall apply solely to customer's use of Equifax Credit Reference Checks.

“CRAIN” means the Credit Reference Agency (CRA) Information Notice, the industry standard privacy information policy adopted by the leading UK CRAs (a copy of which can be found here: https://www.equifax.co.uk/crain), and as may be updated from time to time;
“Equifax” means Equifax Limited, a company incorporated and registered in England and Wales with company number 2425920 registered office is at 1 Angel Court, London, EC2R 7HJ;
“Information Services” means any services (including the provision of Output Data) provided by Equifax that the customer is authorised to receive via Mitek.
“Output Data” means any information or data provided by Equifax that the customer is authorised to receive via Mitek; 
“Resale Agreement” the agreement between Equifax and Mitek, under which Mitek is permitted to resell the Information Services and Output Data;
“Search” means a search made of Equifax’s database (including via Mitek) for the purpose of obtaining information in relation to an individual or corporate entity;
1.    PERMITTED USE
1.1    The customer shall only use the Output Data;
1.1.1    in compliance with all applicable laws;
1.1.2    solely as permitted in the Agreement; and
1.1.3    otherwise in compliance with these terms. 
1.2    The customer must not:
1.2.1    resell or offer to resell any of the Output Data; or
1.2.2    disclose to any other person any of the Output Data, except:
1.2.2.1    when required to do so by law or any regulatory authority, including following a subject access request submitted by a consumer to whom the data relates; or
1.2.2.2    to the customer’s personnel whose duties reasonably require such disclosure, on condition that the customer ensures that each such person to whom such disclosure is made, is informed of the customer’s obligation of confidentiality and non-disclosure, and are subject to equivalent obligations.

2.    AUTHENTICATION
2.1    NOT USED
2.2    The customer acknowledges that a failure to properly validate and authenticate a consumer may result in the use and/or disclosure of consumer data in breach of applicable law including the UK Data Protection Law, potentially requiring the involvement of the Financial Conduct Authority and/or the Information Commissioner’s Office.  Accordingly, to the extent that the customer becomes aware of or reasonably suspects that a consumer has not been properly authenticated or is not the person they purported to be, the customer will:
2.2.1    immediately notify Equifax (which may be given via Mitek) and provide all relevant details available to enable Equifax and Mitek to determine whether a notification to the Financial Conduct Authority and/or Information Commissioner’s Office is required (a “Notification”);
2.2.2    provide all reasonable assistance and co-operation requested by Mitek and/or Equifax in relation to a Notification or to otherwise investigate the matter.
3.    ACCURACY
3.1    The Client acknowledges and agrees that:
3.1.1    the information forming part of the Output Data is provided to Equifax by third parties over which Equifax does not have control, in particular in relation to the accuracy or completeness of such information;
3.1.2    the volume and nature of the information on Equifax databases makes it impractical for Equifax to verify the information; 
3.1.3    if Equifax were to attempt to verify the Output Data, Equifax would only be able to offer the Information Services to Mitek at significantly increased cost, which would in turn increase the costs paid by the Customer; and
3.1.4    Equifax is not in any circumstances liable to any party for any loss or damage at all arising from any inaccuracies, faults or omissions in, or in the provision of, the Output Data unless caused by Equifax’s negligence or wilful default.
4.    DATA PROTECTION AND TRANSPARENCY
4.1    For the purposes of the data protection regulations, Customer, Equifax, and Mitek shall each be independent controllers of any personal data contained within the input data and Output Data, and Customer shall comply with its obligations under the Data Protection Regulations.
4.2    Without prejudice to the generality of clause 4.1, before providing any input data to Equifax (including via Mitek) or otherwise conducting a search in relation to a consumer, Customer shall:
4.2.1    notify the consumer about whom a search is made that their information will be disclosed to a credit reference agency, which may keep a record of that information and disclose it (and the fact that a search was made) to its other customers, including for the purposes of assessing the risk of giving credit and occasionally to prevent fraud, money laundering and to trace debtors;
4.2.2    make a copy of the CRAIN available to the consumer so that they might understand how the credit reference agencies process their personal data; and
4.2.3    on request (which may be received directly or via Mitek), provide a copy of the notification used to satisfy the obligations of the above to Equifax.
5.    SECURITY AND AUDIT
5.1    Customer shall maintain adequate security measures to protect the integrity, security and confidentiality of all Output Data, including as a minimum by complying with Equifax’s security requirements and policies, as made available by Equifax to Mitek and Customer from time to time.
5.2    Customer shall provide to Mitek and Equifax any information reasonably requested in order to assess whether the Customer’s use of the Information Services and Output Data is in compliance with these terms.
6.    TERMINATION OF SERVICES
6.1    Equifax may cease to make the Output Data available to Mitek for resale to the customer in the event of the following:
6.1.1    the customer commits a material breach of these Terms;
6.1.2    the provision or intended use of Information Services by the customer is or is likely to be or become unlawful due to a change in Applicable Law, regulatory guidance or court ruling.

Checks against multiple data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography.

Checks against multiple data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography.

Checks against a single data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography and pricing varies based on region.

Checks against a single data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography and pricing varies based on region.

Checks against a single data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography and pricing varies based on region.

Checks against multiple data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography.

Checks against multiple data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography.

Checks against multiple data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography.

Checks against multiple data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography.

Checks against multiple data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography.

Checks against multiple data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography.

Checks against multiple data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography.

Checks the Argentina Agencia de Recaudación y Control Aduanero (ARCA) register for KYC matches against the identity for Name, DOB, AFIP, and Address.

Checks the Brazil Cadastro de Pessoas Físicas (CPF) register for KYC matches against the identity for Name, DOB, CPF, and Address.

Checks the Mexico Clave Única de Registro de Población (CURP) register for KYC matches against the identity for Name, DOB, CURP, and Address.

Checks the Nigeria National Identification Number (NIN) register for KYC matches against the identity for Name, DOB, NIN, and Address.

Checks the US Social Security Number (SSN) register for KYC matches against the identity for Name, DOB, SSN, and Address.

Checks against multiple data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography.

Checks against multiple data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography.

Checks against multiple data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography.

Checks against multiple data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography.

Checks against multiple data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography.

Checks against multiple data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography.

Checks against multiple data sources including government and bureau databases, utility information, and proprietary data for KYC matches against the identity for Name, DOB, national identifier, and address. This service also identifies, and reports, the source of where the data match was found. *Available sources will differ per geography.

Previous SKU: MVP-LSD
Data source governed by local Dutch Police Department agencies, named KLPD, which provides data for lost & stolen documents globally via the Interpol lost & stolen documents register. Availability: Netherlands only

Data source governed by local Dutch Police Department agencies, named KLPD, which provides data for lost & stolen documents globally via the Interpol lost & stolen documents register.

This fee is charged on a per year, per user basis for all licensed users with stored biometric templates within the system.

This fee is charged on a per user, per year basis and includes unlimited reverifications using a user's stored biometric template. Their face and/or voice biometrics will be compared to the enrolled template to determine if it is the same user. This service can be offered via API or hosted journey.

This allows user enrollment of  both face & voice biometrics into the MiPass service via API or hosted journey. This model is charged on a per user, per month basis and includes unlimited reverifications per month.

This allows user enrollment of both face & voice biometrics into the MiPass service via MiVIP low code/ no code or via a stand-alone API integration. This pricing is used when a customer will be enrolling the user at the same time as conducting a face liveness/ comparison check through Mitek.

This allows user enrollment of both face & voice biometrics into the MiPass service via API or hosted journey. This fee is charged one time for each user enrolled to the service.

This allows user enrollment of both face & voice biometrics into the MiPass service via API. This product falls under a full code implementation.

This fee is charged per occurrence when a user reauthenticates themselves using their stored biometric template via MiPass. Their face and/or voice biometrics will be compared to the enrolled template to determine if it is the same user. This service can be offered via API or hosted journey.

This fee is charged per occurrence when a user reauthenticates themselves using their stored biometric template. Their face and/or voice biometrics will be compared to the enrolled template to determine if it is the same user. This service can be offered via API or hosted journey.

Previous SKU: MiSNAP
The MiSnap Mobile Software Development Kit (SDK) allows a developer to integrate MiSnap with mobile device image capture applications in order to provide guided image capture, identity document imaging, intelligent character and image recognition, and document analysis.  MiSnap may only be used to obtain an image that will be submitted to Mitek for identity authentication or biometric comparison purposes pursuant to this Order Form and the Master Services Agreement; any use of MiSnap to capture images which are not sent to Mitek for further processing is prohibited.  Use of MiSnap is required for purposes of product support and service level agreements.  
MiSnap is available as (i) MiSnap iOS and Android: native SDK that assists with the capture of an image utilizing video-based automated image quality analysis or manual end-user capture and/or (ii) MiSnap Mobile Web - a web SDK that assists with the capture of an image utilizing single frame-based automated image quality analysis.
Note:  When incorporating MiSnap into a website or application to assist with image capture, Customer is solely responsible for providing any legally required notices and/or obtaining any legally required consents prior to utilizing MiSnap to capture images or other data from individuals.  Availability:  Global

The MiSnap Mobile Software Development Kit (SDK) allows a developer to integrate MiSnap with mobile device image capture applications in order to provide guided image capture, identity document imaging, intelligent character and image recognition, and document analysis. MiSnap may only be used to obtain an image that will be submitted to Mitek for identity authentication or biometric comparison purposes pursuant to this Order Form and the Master Services Agreement; any use of MiSnap to capture images which are not sent to Mitek for further processing is prohibited. Use of MiSnap is required for purposes of product support and service level agreements. MiSnap is available as (i) MiSnap iOS and Android: native SDK that assists with the capture of an image utilizing video-based automated image quality analysis or manual end-user capture and/or (ii) MiSnap Mobile Web - a web SDK that assists with the capture of an image utilizing single frame-based automated image quality analysis. Note: When incorporating MiSnap into a website or application to assist with image capture, Customer is solely responsible for providing any legally required notices and/or obtaining any legally required consents prior to utilizing MiSnap to capture images or other data from individuals.

Previous SKU: MVP-MS-SDK
MiSnap SDK provides our best in class capture technology to be integrated into your app. The SDK will help to provide user guidance and auto capture to ensure the best possible image is submitted for identity document and biometric verification. This SDK is available for full code implementations. Availability:  Global

MiSnap SDK provides our best in class capture technology to be integrated into your app. The SDK will help to provide user guidance and auto capture to ensure the best possible image is submitted for identity document and biometric verification. This SDK is available for full code implementations.

Sold in ALL Supported Geos. Availability:  Global

Sold in ALL Supported Geos. Availability:  Global

Previous SKU: MVP-NJ-SDK
Mitek's Native Journey SDK, available for iOS and Android, is a fully orchestrated user interface and user journey delivered as an SDK for integration into any native application. The SDK is packaged together with Mitek's capture technology, MiSnap.  Availability: Global

Mitek's Native Journey SDK, available for iOS and Android, is a fully orchestrated user interface and user journey delivered as an SDK for integration into any native application. The SDK is packaged together with Mitek's capture technology, MiSnap.

Mobile Docs enables end-users to capture high-quality images of documents (submitted via the web), and to receive cleaned and rotated versions of the documents. The images can then be used by the Mitek customers for local storage or as part of their business process. Mobile Docs includes MiSnap Mobile Docs SDK. This version of MiSnap Mobile Web is specifically designed to capture full-page documents for processing with Mobile Docs. This web SDK is utilized by customers that want to capture full page documents submitted via the web for archival purposes. The images are processed locally.

Mobile Fill offers our customers the ability to reduce onboarding friction by extracting personal information (names, addresses, etc.) from supported identity documents. When the end-user takes a high-quality picture of documents for processing, the image is then sent to our customer who sends it on to us for our services. Upon receipt of the image, we extract the personal information and return it to the customer for prefilling a form.

Previous SKU: MV-AGT
Mobile Verify - Agent utilizes specially trained human agents assisted by powerful AI to review submitted identity documents for signs of authenticity and evidence of forgery or alteration.  An indicator of authenticity and extracted data (such as name, address, issue date, document number, and other relevant data) contained on the identity document are returned. Availability: Global

Mobile Verify - Agent utilizes specially trained human agents to review submitted identity documents for signs of authenticity and evidence of forgery or alteration. An indicator of authenticity and extracted data (such as name, address, issue date, document number, and other relevant data) contained on the identity document are returned.

Previous SKU: MV-ASU
Mobile Verify - Agent Step Up can be used in conjunction with a Mobile Verify - Auto Transaction and allows a customer to resubmit Transactions for additional review by trained professional identity document reviewers.  Transactions submitted to Mobile Verify Auto, may be resubmitted to Agent Step Up and generally will be limited to Transactions which are not accepted, returned as unclassified or encounter other rejections by Mobile Verify - Auto.  Agent Step Up may only be utilized in connection with Mobile Verify - Auto Transactions.  Agent Step Up Transactions incur additional per Transaction fees as specified in the pricing table. Availability: Global

Mobile Verify - Agent Step Up can be used in conjunction with a Mobile Verify - Auto Transaction and allows a customer to resubmit Transactions for additional review by trained professional identity document reviewers. Transactions submitted to Mobile Verify Auto, may be resubmitted to Agent Step Up and generally will be limited to Transactions which are not accepted, returned as unclassified or encounter other rejections by Mobile Verify - Auto. Agent Step Up may only be utilized in connection with Mobile Verify- Auto Transactions. Agent Step Up Transactions incur additional per Transaction fees as specified in the pricing table.

Mobile Verify - Auto offers our customers assistance in determining the authenticity of an end-user's supported identity document submitted via their mobile device or the web. Mitek's advanced AI based identity document verification is at the core of Mobile Verify - Auto. When an image is captured on a mobile device, such image is sent from the device to our customer, who in turn submits the image to Mitek's service for processing. A variety of techniques are applied during Mitek's verification process which look for evidence of forgery and signs of authenticity. Mitek generates and returns a score as an indicator of whether or not a document is considered authentic. Our customers utilize these scores as part of their business workflow and decisioning processes. Mobile Verify - Auto also returns extracted personal data (names, addresses, etc.) from the document which can be used to pre-fill an application or to compare against other data submitted by the end-user. In addition and where applicable, Mobile Verify - Auto customers can utilize our NFC functionality to further verify the authenticity of the submitted identity document (note NFC functionality can only be utilized by a customer when a corresponding image of the identity document is also sent to Mobile Verify - Auto for processing).

Mobile Verify - Biometrics automatically compares the portrait on the identity document against an end-user-provided selfie. The result includes an indicator of how well the portrait on the identity document matches the selfie along with a determination of whether the selfie is of a live person. Mobile Verify - Biometrics may only be utilized in connection with Mobile Verify- Auto Transactions. Note: The use of software or algorithms to compare images of an individual may be considered the use or creation of "biometric" information in some jurisdictions. If the Mobile Verify - Biometrics feature is utilized, Customer should consult with their privacy counsel to ensure that Customer is providing all legally required notices and obtaining all legally required consents relative to the collection, creation, use or storage of "biometric" information.

Mobile Verify - Biometric Agent Review enables Mitek customers to check that the portrait on the identity document matches an end-user-provided selfie image. The result includes an indicator of how well the portrait on the identity document matches the selfie as well as determining if the selfie is of a live person. Face matching is performed by trained human agents assisted with powerful AI. Note: The use of software or algorithms to compare images of an individual may be considered the use or creation of "biometric" information in some jurisdictions. If the Mobile Verify - Biometric Agent Review feature is utilized, Customer should consult with their privacy counsel to ensure that Customer is providing all legally required notices and obtaining all legally required consents relative to the collection, creation, use or storage of "biometric" information.  Availability: Global

Mobile Verify - Biometric Step Up enables Mitek customers to check that the portrait on the identity document matches an end-user-provided selfie image. The result includes an indicator of how well the portrait on the identity document matches the selfie as well as determining if the selfie is of a live person. Face matching is performed by trained human agents assisted with powerful AI. Note: The use of software or algorithms to compare images of an individual may be considered the use or creation of "biometric" information in some jurisdictions. If the Mobile Verify - Biometric Step Up feature is utilized, Customer should consult with their privacy counsel to ensure that Customer is providing all legally required notices and obtaining all legally required consents relative to the collection, creation, use or storage of "biometric" information.

Mobile Verify - Document and Biometric Auto automatically compares the portrait on the identity document against an end-user-provided selfie.  The result includes an indicator of how well the portrait on the identity document matches the selfie along with a determination of whether the selfie is of a live person. Mobile Verify - Document and Biometric Auto may only be utilized in connection with Mobile Verify- Auto Transactions. Note: The use of software or algorithms to compare images of an individual may be considered the use or creation of "biometric" information in some jurisdictions.  If the Mobile Verify - Document and Biometric Auto feature is utilized, Customer should consult with their privacy counsel to ensure that Customer is providing all legally required notices and obtaining all legally required consents relative to the collection, creation, use or storage of "biometric" information. Availability: Global

Mobile Verify - Auto offers our customers assistance in determining the authenticity of an end-user's supported identity document submitted via their mobile device or the web. Mitek's advanced AI based identity document verification is at the core of Mobile Verify - Auto. When an image is captured on a mobile device, such image is sent from the device to our customer, who in turn submits the image to Mitek's service for processing. A variety of techniques are applied during Mitek's verification process which look for evidence of forgery and signs of authenticity. Mitek generates and returns a score as an indicator of whether or not a document is considered authentic. Our customers utilize these scores as part of their business workflow and decisioning processes.  Mobile Verify - Auto also returns extracted personal data (names, addresses, etc.) from the document which can be used to pre-fill an application or to compare against other data submitted by the end-user. In addition and where applicable, Mobile Verify - Auto customers can utilize our NFC functionality to further verify the authenticity of the submitted identity document (note NFC functionality can only be utilized by a customer when a corresponding image of the identity document is also sent to Mobile Verify - Auto for processing). Availability:  Global

Previous SKU: MV-REV
Mobile Verify - Reverification enables our customers to re-verify the identity of an end user with advanced AI-based face comparison between a new selfie (obtained via MiSnap) and baseline comparison photo (i.e. previously obtained from ID documents). Includes ISO 30107-3 certified advanced liveness detection. Note: The use of software or algorithms to compare images of an individual may be considered the use or creation of "biometric" information in some jurisdictions.  If the Mobile Verify - Reverification feature is utilized, Customer should consult with their privacy counsel to ensure that Customer is providing all legally required notices and obtaining all legally required consents relative to the collection, creation, use or storage of "biometric" information. Availability: Global

Mobile Verify - Reverification enables our customers to re-verify the identity of an end user with advanced AI-based face comparison between a new selfie (obtained via MiSnap) and baseline comparison photo (i.e. previously obtained from ID documents). Includes ISO 30107-3 certified advanced liveness detection. Note: The use of software or algorithms to compare images of an individual may be considered the use or creation of "biometric" information in some jurisdictions. If the Mobile Verify - Reverification feature is utilized, Customer should consult with their privacy counsel to ensure that Customer is providing all legally required notices and obtaining all legally required consents relative to the collection, creation, use or storage of "biometric" information.

Previous SKU: MV-SIG
Mobile Verify - Signals is a U.S. driver's license verification service currently available in most U.S. states that allows our customers presented with a license or ID card to verify that the data on the card matches the data held by the jurisdiction that issued the document. Mitek can provide you with a list of U.S. states currently participating in this program. This service requires that data be provided to a third-party processor. Availability: Global

Mobile Verify - Signals is a U.S. drivers license verification service currently available in most U.S. states that allows our customers presented with a license or ID card to verify that the data on the card matches the data held by the jurisdiction that issued the document. Mitek can provide you with a list of U.S. states currently participating in this program. This services requires that data be provided to a third-party processor.

Mobile Verify Enterprise Edition Mobile Verify Enterprise Edition. Images of an identity document and a selfie captured utilizing MiSnap are submitted to Mitek for assistance in verifying the authenticity through our automated identity verification functionality (Mobile Verify - Auto) along with assistance in verifying the identity of an end user (Mobile Verify - Biometrics). A portion of the Transactions submitted to Mobile Verify Enterprise Edition, may also be sent to our Agent Step Up process limited to Transactions which are not accepted, returned as unclassified or encounter other rejections by Mobile Verify - Auto pursuant to Mitek's established criteria). If customer elects to send additional Transactions to Agent Step Up that are not the result of the above processing issues, additional per Transaction fees will apply. In addition, and where applicable, Mobile Verify Enterprise Edition customers can utilize our NFC functionality to further verify the authenticity of the submitted identity document. Products included in this package are: - Mitek Instance - MiSnap SDK - Mobile Verify-Auto (with NFC where applicable) - Mobile Verify-Biometric - Mobile Verify-Agent Step Up Every Transaction must always first run through Mobile Verify-Auto regardless of whether Customer uses some or all of the features and services listed above. Customer can also enhance the Mobile Verify Enterprise services with these additional add-ons (priced separately): - Mobile Verify - Signals - Mobile Verify - Biometric Step Up - Mobile Verify - Reverification - Mobile Verify - Agent Step Up

Mobile Verify Global Edition. Images of an identity document and a selfie captured utilizing MiSnap are submitted to Mitek where the identity document is reviewed by our specially trained human agents assisted by powerful AI for signs of authenticity and evidence of forgery or alteration (Mobile Verify - Agent). The image of the identity document and selfie are also run through Mitek's Mobile Verify - Auto and Mobile Verify - Biometrics functions to provide an indication of whether or not the person submitting the document is the owner of the document. In addition and where applicable, Mobile Verify Global Edition customers can utilize the NFC functionality built into MiSnap to further verify the authenticity of the submitted identity document. Products included in this package are: - Mitek Instance - MiSnap SDK - Mobile Verify - Agent - Mobile Verify - Auto (with NFC where applicable) - Mobile Verify - Biometrics Customer can also enhance the Mobile Verify Global services with these add-ons (priced separately): - Mobile Verify - Biometric Step Up - Mobile Verify - Reverification.

Previous SKU: MVP-PC
Proof of Payment Card through low code/ no code implementation. The end user is asked to provide photo image(s) of their Payment Card to assist in the identification process. This feature accepts all payment cards containing the essential information needed for the review (name, card number, expiry date, issuing organization and card type) if this information is present in Latin characters or there is a suitable translation on the card. This service includes step-up to manual review. Availability: Global

Proof of Payment Card through low code/ no code implementation. The end user is asked to provide photo image(s) of their Payment Card to assist in the identification process. This feature accepts all payment cards containing the essential information needed for the review (name, card number, expiry date, issuing organization and card type) if this information is present in Latin characters or there is a suitable translation on the card. This service includes step-up to manual review.

Previous SKU: MVP-PC-API
Proof of Payment Card through API implementation. The end user is asked to provide photo image(s) of their Payment Card to assist in the identification process. This feature accepts all payment cards containing the essential information needed for the review (name, card number, expiry date, issuing organization, and card type). The information must consist of Latin characters or contain a suitable translation on the card. Availability: Global

Proof of Payment Card through API implementation. The end user is asked to provide photo image(s) of their Payment Card to assist in the identification process. This feature accepts all payment cards containing the essential information needed for the review (name, card number, expiry date, issuing organization, and card type). The information must consist of Latin characters or contain a suitable translation on the card.

A Pilot of one or more Mitek products may be run for a defined period of time and at a fixed cost.  A Pilot requires clearly defined and mutually agreed upon success criteria.  Pilot implementation will be managed by the  Professional Services Team. The specific products, use quantities, time frame and cost of each pilot are specified in the order form. Availability:  Global

A Pilot of one or more Mitek products may be run for a defined period of time and at a fixed cost. A Pilot requires the establishment of written success criteria in design and implementation and includes the use of our Professional Services. The specific products, use quantities, time frame and cost of each pilot are specified in the order form.

A Pilot of one or more Mitek products may be run for a defined period of time and at a fixed cost. A Pilot requires the establishment of written success criteria in design and implementation and includes the use of our Professional Services. The specific products, use quantities, time frame and cost of each pilot are specified in the order form.

A Pilot of one or more Mitek products may be run for a defined period of time and at a fixed cost. A Pilot requires the establishment of written success criteria in design and implementation and includes the use of our Professional Services. The specific products, use quantities, time frame and cost of each pilot are specified in the order form.

A Pilot of one or more Mitek products may be run for a defined period of time and at a fixed cost. A Pilot requires the establishment of written success criteria in design and implementation and includes the use of our Professional Services (as defined below). The specific products, use quantities, time frame and cost of each pilot are specified in the order form.

Previous SKU: MVP-POA-DOC
Proof of Address verification using the combination of an automated process with step-up to an agent-supported process through a hosted web journey. Availability:  Global

Proof of Address verification using the combination of an automated process with step-up to an agent-supported process through a hosted web journey.

The Single Doc Check API allows customers to submit a photo ID for validation along with a range of selfies for biometric comparison. This option processes both auto verifications and step-up to agent verification if required. The API also permits the submission of various Proof of Address documents for Name and Address extraction. This facility is available via API only and does not support a user interface. Customers must collect the document images themselves or use MiSnap and submit via the API. Different document processing engines can be set to process the documents from within the platform. NOTE:  All transactions must also include Auto API.

The POI & POA Document Verification Agent - API allows customers to submit a photo ID for validation along with a range of selfies for biometric comparison. This option processes both auto verifications and step-up to agent verification if required. The API also permits the submission of various Proof of Address documents for Name and Address extraction. This facility is available via API only and does not support a user interface. Customers must collect the document images themselves or use MiSnap and submit via the API. Different document processing engines can be set to process the documents from within the platform. NOTE:  All transactions must also include Auto API. Availability:  Global

Previous SKU: MVP-POAI-AUTO
The POI & POA Document Verification Auto - API allows customers to submit a photo ID for validation along with a range of selfies for biometric comparison for auto-only processing. This facility is available via API only. Customers must collect the document images themselves or use MiSnap and submit via the API. Different document processing engines can be set to process the documents from within the platform. Availability: Global

The Single Doc Check API allows customers to submit a photo ID for validation along with a range of selfies for biometric comparison for auto-only processing. This facility is available via API only. Customers must collect the document images themselves or use MiSnap and submit via the API. Different document processing engines can be set to process the documents from within the platform.

Previous SKU: MVP-POI-DOC
Proof of Identity Document Verification using the combination of an automated process with step-up to an agent-supported process through a hosted web journey. Availability:  Global

Proof of Identity Document Verification using the combination of an automated process with step-up to an agent-supported process through a hosted web journey.

Ongoing support and platform tuning for all environments and workflows.

Previous SKU: PS-BoH
Dedicated hourly time from a Professional Services team member that can be used for additional new implementation work and product training. Available in blocks of 10, 20, 40, & 80 hours. Standard business hours Monday - Friday 9am to 5pm apply.

Dedicated hourly time from a Professional Services team member that can be used for scoped implementation work, UI/UX design sessions, health checks, war rooms, product training, and/or MiSnap certifications. Available in blocks of 10, 20, 40, & 80 hours. Blocks are for standard business hours.

Customized work performed by the Professional Services Team.  Scoping is mandatory and an SOW is required. Availability:  Global

Previous SKU: MVP-QT
Timestamps ensure that the document existed at a specific moment in time during the verification journey, and remains unchanged, providing legally secure evidence of its integrity. This service is a qualified timestamp, issued by a Qualified Trust Service Provider (QTSP) in compliance with Regulation (EU) No. 910/2014 (eIDAS), to offer supporting documentation as audit-proof for identity verification. Availability: Global

Timestamps ensure that the document existed at a specific moment in time during the verification journey, and remains unchanged, providing legally secure evidence of its integrity. This service is a qualified timestamp, issued by an Qualified Trust Service Provider (QTSP) in compliance with Regulation (EU) No. 910/2014 (eIDAS), to offer supporting documentation as audit-proof for identity verification.

Previous SKU: MVP-Q
Ability to capture bespoke information as part of the customer journey. In this case, the questionnaire allows a customer to answer questions that are returned as part of the overall processing of the information. Availability: Global

Ability to capture bespoke information as part of the customer journey. In this case, the questionnaire allows a customer to answer questions that are returned as part of the overall processing of the information.

Previous SKU: MVP-RI
A Re-Invite will reopen a request and re-send it to the end-user for the purpose of requesting alternative/additional documents after that user has completed a request. Availability: Global

A Re-Invite will reopen a request and re-send it to the end-user for the purpose of requesting alternative/additional documents after that user has completed a request.

Validate API/SDK connectivity and responses are in line with best practices.

Previous SKU: MVP-S
This feature asks the end user to take a photo of their signature on a blank piece of paper and upload it as part of an overall ID verification. There is no validation performed by this service. Availability: Global

This feature asks the end user to take a photo of their signature on a blank piece of paper and upload it as part of an overall ID verification. There is no validation performed by this service.

Previous SKU: PS-SSO
This service allows users to log into the MiVIP platform via SSO using the OAuth (Open Authorization) open standard. This is an annual recurring fee. Availability: Global

This service allows users to log into the MiVIP platform via SSO using the OAuth (Open Authorization) open standard.

Previous SKU: MVP-SMS
This feature is a record of the number of SMS messages that were sent to the end user for each ID verification request. These charges include the initial request SMS, reminder messages, mobile hand-off and notify me messages triggered per request. Availability: Global

This feature is a record of the number of SMS messages that were sent to the end user for each ID verification request. These charges include the initial request SMS, reminder messages, mobile hand-off and notify me messages triggered per request.

Previous SKU: MVP-UV
The unassisted video service provides a web capture stream of the identity verification journey. This service is normally packaged with identity document verification. The verification results, plus the video are returned to the customer to be stored for audit purposes. Availability: Global

The unassisted video service provides a web capture stream of the identity verification journey. This service is normally packaged with identity document verification. The verification results, plus the video are returned to the customer to be stored for audit purposes.

Previous SKU: MVP-DLC
Validates personal details with specific local US-based DMV providers through AAMVA.
Currently covers 44 US states.

Validates personal details with specific local US-based DMV providers through AAMVA. Currently covers 39 US states.

Video Assist enables remote identity verification with a face to face video call interview between the user and a qualified agent to help meet regulatory compliance obligations such as BaFin in Germany and SEPBLAC in Spain. Video verification can be done via the browser on a desktop or mobile device with stable internet connection. With this seamless journey, the user is guided throughout the process by useful tips and instructions before the video call, and during the video call a certified agent helps the user to submit the correct documents for a successful verification.

The BPR service provided by NDL Police is a government-hosted external API that allows querying the status of a given document using the 'Document Number' parameter. The database contains records exclusively for Dutch citizens and is part of the 'Basis Registratie Personen' (BRP), the Dutch government's personal identification register system.

Previous SKU: MVP-WL-MN
Allows the uploading of individuals into a PEP's and Sanctions monitoring service that alerts clients to any updates as to the status of their end users on the Global PEP's, Sanctions, and adverse media registers. Availability:  Global

The following supplemental terms shall apply solely to customer’s use of Watchlist (Monitoring).

1. Submission of any new request for Watchlist (Monitoring) in respect of an individual inquiry which creates a record for ongoing monitoring (“Record”), will incur a fee at the rate set out on the applicable order schedule.

2. In the event that a Record is not deleted via the Mitek portal prior to an annual renewal, such Record will incur an additional fee at the rate set out above (“Anniversary Fee”) on the day following that annual renewal.

3. Where customer has entered into a fixed 12-month order which does not renew for a further term, customer will be charged an Anniversary Fee for any Records which have not been deleted prior to the expiration of the then-current term.

4. Customer shall extract any data it desires to retain relating to Records prior to: (i) deletion of that Record; or (ii) the expiry or termination of the relevant order schedule. Any failure to do so will result in such data being lost.

5. Expiry or termination of this Order will result in all Records and associated data being deleted and customer’s account being closed.

Allows the uploading of individuals into a PEP's and Sanctions monitoring service that alerts clients to any updates as to the status of their end users on the Global PEP's, Sanctions, and adverse media registers.

The following supplemental terms shall apply solely to customer’s use of Watchlist (Monitoring).

1. Submission of any new request for Watchlist (Monitoring) in respect of an individual inquiry which creates a record for ongoing monitoring (“Record”), will incur a fee at the rate set out on the applicable order schedule.

2. In the event that a Record is not deleted via the Mitek portal prior to an annual renewal, such Record will incur an additional fee at the rate set out above (“Anniversary Fee”) on the day following that annual renewal.

3. Where customer has entered into a fixed 12-month order which does not renew for a further term, customer will be charged an Anniversary Fee for any Records which have not been deleted prior to the expiration of the then-current term.

4. Customer shall extract any data it desires to retain relating to Records prior to: (i) deletion of that Record; or (ii) the expiry or termination of the relevant order schedule. Any failure to do so will result in such data being lost.

5. Expiry or termination of this Order will result in all Records and associated data being deleted and customer’s account being closed.

Previous SKU: MVP-WL-TX
This feature provides search services into global PEP, Sanctions, and Adverse media records enabling customers to comply with Anti Money Laundering (AML) compliance requirements. Availability: Global

This feature provides search services into global PEP, Sanctions, and Adverse media records enabling customers to comply with Anti Money Laundering (AML) compliance requirements.