Pass and Fail each cite a URL. Unknown means we could not find a published page for that check — it is not a hidden fail. We do not hands-on test vendor controls. Same published-posture rule as /methodology. Reviewed 2026-08-30.
AuthBridge provides AI-powered identity verification and KYC solutions.
India relevance. AuthBridge's services are tailored for the Indian market, leveraging Aadhaar for identity verification.
Data LocalizationUnknown
The pages do not provide explicit information about data storage locations in India.
No source URL — Unknown
Consent ManagementUnknown
The privacy policy mentions compliance with data protection laws but does not clearly state how consent withdrawal is managed.
No source URL — Unknown
Model ExplainabilityUnknown
There is no information provided about the explainability of AI decision-making processes.
No source URL — Unknown
Security CertsUnknown
No specific security certifications such as SOC 2 Type II, ISO 27001, or PCI DSS are mentioned.
No source URL — Unknown
Bias TestingUnknown
There is no evidence of published tests or audits regarding bias in their models.
No source URL — Unknown
Vendor ViabilityPass
AuthBridge is described as India's largest verification company, indicating a strong market presence.
Source: AuthBridge Homepage ↗Bureau provides AI-powered solutions for identity verification and fraud prevention.
India relevance. Bureau operates in India and addresses compliance with RBI regulations.
Data LocalizationUnknown
The pages do not clearly state where data is stored in relation to RBI and DPDP requirements.
No source URL — Unknown
Consent ManagementUnknown
The privacy policy does not explicitly mention how consent withdrawal is managed as per DPDP mandates.
No source URL — Unknown
Model ExplainabilityUnknown
There is no information provided about how the AI models make decisions or if they can be explained.
No source URL — Unknown
Bias TestingUnknown
There is no evidence of published tests or audits for bias in the AI models.
No source URL — Unknown
Vendor ViabilityUnknown
Bureau has a dated customer win mentioned in their resources.
No source URL — Unknown
India relevance. Decentro is trusted by over 2000 Indian businesses for faster fintech launches.
Data LocalizationUnknown
The pages do not provide clear information about data localization in India.
No source URL — Unknown
Consent ManagementUnknown
There is no explicit mention of how the tool handles consent withdrawal as per DPDP.
No source URL — Unknown
Model ExplainabilityUnknown
The pages do not provide information on whether the vendor can explain AI decision-making.
No source URL — Unknown
Security CertsUnknown
There is no mention of specific security certifications like SOC 2, ISO 27001, or PCI DSS.
No source URL — Unknown
Bias TestingUnknown
There is no evidence of bias testing or audits published by the vendor.
No source URL — Unknown
Vendor ViabilityUnknown
The vendor is supported by a significant number of clients, indicating viability.
No source URL — Unknown
AI Powered End to End API Platform for Banking and FinTech
India relevance. Indian lender-facing identity/income APIs. Confirm residency and DPDP pages.
Data LocalizationUnknown
The pages do not provide clear information about data storage location in India as per RBI and DPDP requirements.
No source URL — Unknown
Consent ManagementUnknown
There is no explicit mention of how the tool honors consent withdrawal as mandated by DPDP.
No source URL — Unknown
Model ExplainabilityUnknown
The pages do not provide information on whether the vendor can explain how their AI makes decisions.
No source URL — Unknown
Security CertsUnknown
There is no mention of specific security certifications like SOC 2 Type II, ISO 27001, or PCI DSS.
No source URL — Unknown
Bias TestingUnknown
The pages do not provide evidence of any testing for discriminatory outcomes or fairness audits.
No source URL — Unknown
Gridlines helps businesses verify customers, workers, partners, merchants, borrowers, and users through configurable identity, video KYC, eSigning, and fraud-risk workflows.
India relevance. Indian verification APIs marketed to fintechs. Confirm certifications on-site.
Data LocalizationUnknown
The pages do not provide clear information about data storage location in relation to RBI and DPDP requirements.
No source URL — Unknown
Consent ManagementUnknown
There is no information regarding how the tool handles consent withdrawal as mandated by DPDP.
No source URL — Unknown
Model ExplainabilityUnknown
The pages do not provide information on whether the vendor can explain how their AI makes decisions.
No source URL — Unknown
Security CertsUnknown
There is no mention of specific security certifications such as SOC 2 Type II, ISO 27001, or PCI DSS.
No source URL — Unknown
Bias TestingUnknown
There is no evidence of testing for discriminatory outcomes or any related studies published.
No source URL — Unknown
AI eKYC, passive liveness, face authentication, and video KYC used for digital onboarding.
India relevance. Offices in Bengaluru, Mumbai, and Coimbatore. NBFC page claims RBI-compliant onboarding; homepage shows Video KYC and Indian ID checks.
Data LocalizationUnknown
No vendor page found that says customer KYC data is stored or processed in India. Blogs discuss localization as a buyer requirement, not a named India data-centre claim.
No source URL — Unknown
Consent ManagementPass
HyperTrust product page advertises DPDP consent capture, review, and withdrawal tracking with immutable consent logs. That is a consent product, not a claim about the KYC API itself.
Source: HyperTrust DPDP consent ↗Model ExplainabilityUnknown
Homepage describes AI liveness and deepfake detection. No page found that explains individual KYC/AI decisions or publishes a model card.
No source URL — Unknown
Security CertsPass
Homepage “Certified, Compliant, and Patented” block displays AICPA SOC 2 and ISO 27018. Type I vs Type II is not stated. ISO 27001 was not claimed on that page.
Source: HyperVerge homepage certs ↗Bias TestingUnknown
Homepage slogan “Built to Verify Every Demographic, Without Bias” is marketing copy, not a published fairness test or audit.
No source URL — Unknown
Vendor ViabilityPass
About page states HyperVerge has scaled to $19M+ ARR while raising $1.1M, and lists India offices in Bengaluru, Mumbai, and Coimbatore.
Source: About us ↗India-native KYC, video KYC, and fraud APIs, plus Privy for DPDP consent and privacy ops.
India relevance. Mumbai-based (Baldor Technologies). KYC page claims RBI, SEBI, and IRDAI alignment. Funding post names Indian FI clients including HDFC Bank.
Data LocalizationPass
Company blog states full compliance with RBI data-localization requirements and that customer-sensitive data is stored and processed in India.
Source: SOC 2 / compliance blog ↗Consent ManagementPass
Privy by IDfy is published as a DPDP platform covering consent lifecycle, including collection, updates, and revocation, with audit-ready artifacts.
Source: Privy by IDfy ↗Model ExplainabilityUnknown
KYC product pages describe OCR, FaceMatch, and liveness. No cited page explains how those AI models decide, or publishes reason codes for KYC outcomes.
No source URL — Unknown
Security CertsPass
Homepage claims ISO 27001 and SOC 2 Type 2. A company blog also states SOC 2 Type II and ISO 27001:2022 for the VKYC platform.
Source: IDfy homepage ↗Bias TestingUnknown
IDfy blogs discuss bias auditing as something lenders should do. No published bias test of IDfy’s own KYC or biometric models was found.
No source URL — Unknown
Vendor ViabilityPass
Company blog: Series D of ₹86 crore led by TransUnion and Blume Ventures (Oct 2021). Legal entity named as Baldor Technologies Pvt. Ltd.
Source: Series D announcement ↗Best FinTech Software Company -Digital Onboarding, Underwriting, Risk & Fraud Assessment
India relevance. Indian KYC/data APIs; Karza was acquired by Perfios. Confirm the live contracting entity.
Data LocalizationUnknown
The pages do not provide clear information about data storage location in compliance with RBI and DPDP requirements.
No source URL — Unknown
Consent ManagementUnknown
There is no explicit mention of how the tool honors consent withdrawal as mandated by DPDP.
No source URL — Unknown
Model ExplainabilityUnknown
The pages do not provide information on whether the vendor can explain how their AI makes decisions.
No source URL — Unknown
Security CertsUnknown
There is no mention of specific security certifications such as SOC 2 Type II, ISO 27001, or PCI DSS.
No source URL — Unknown
Bias TestingUnknown
There is no evidence of the model being tested for discriminatory outcomes.
No source URL — Unknown
Vendor ViabilityUnknown
The pages do not provide clear evidence of funding, team, MCA filings, or equivalent public proof.
No source URL — Unknown
KYC Hub provides AI-based fraud and compliance infrastructure for risk management.
India relevance. KYC Hub offers solutions that comply with RBI regulations for KYC processes, including V-CIP for remote customer identification.
Data LocalizationUnknown
The pages do not clearly state where the data is stored or if it complies with RBI and DPDP requirements.
No source URL — Unknown
Consent ManagementUnknown
The privacy policy does not explicitly mention how consent withdrawal is managed in accordance with DPDP mandates.
No source URL — Unknown
Model ExplainabilityUnknown
There is no information provided about how the AI models make decisions or if they can be explained.
No source URL — Unknown
Security CertsUnknown
No specific security certifications like SOC 2 Type II, ISO 27001, or PCI DSS are mentioned on the pages.
No source URL — Unknown
Bias TestingUnknown
There are no published tests, audits, or studies regarding bias or discriminatory outcomes in the AI models.
No source URL — Unknown
Vendor ViabilityUnknown
The vendor has a presence in the market and offers a comprehensive solution, indicating viability.
No source URL — Unknown
India relevance. Global vendor (Entrust). Public pages may be multi-region — confirm the India contract.
Data LocalizationUnknown
The pages do not provide clear information about data storage in India per RBI and DPDP requirements.
No source URL — Unknown
Consent ManagementUnknown
There is no explicit mention of how the tool honors consent withdrawal as mandated by DPDP.
No source URL — Unknown
Model ExplainabilityUnknown
The pages do not provide information on whether the vendor can explain how their AI makes decisions.
No source URL — Unknown
Security CertsUnknown
There is no mention of specific security certifications like SOC 2 Type II, ISO 27001, or PCI DSS.
No source URL — Unknown
Bias TestingUnknown
There is no evidence of the model being tested for discriminatory outcomes.
No source URL — Unknown
Vendor ViabilityUnknown
The pages do not provide information on funding, team, MCA filings, or equivalent public proof.
No source URL — Unknown
Setu provides fintech APIs for KYC, payments, and data access in India.
India relevance. Setu's services are designed to meet the fintech needs of businesses in India, facilitating access to financial services.
Data LocalizationUnknown
The pages do not clearly state whether data is stored in India per RBI and DPDP requirements.
No source URL — Unknown
Consent ManagementUnknown
The privacy policy mentions consent but does not explicitly detail how consent withdrawal is honored as per DPDP mandates.
No source URL — Unknown
Model ExplainabilityUnknown
There is no information provided about the explainability of AI decision-making processes.
No source URL — Unknown
Security CertsUnknown
No specific security certifications like SOC 2 Type II, ISO 27001, or PCI DSS are mentioned on the pages.
No source URL — Unknown
Bias TestingUnknown
There is no evidence of published tests or audits for bias or discriminatory outcomes.
No source URL — Unknown
Vendor ViabilityPass
The vendor has a clear presence and is associated with Pine Labs, indicating viability.
Source: About Setu ↗Shufti Pro provides identity verification and KYC solutions for global compliance.
India relevance. Global vendor with Indian ID coverage. Confirm residency, not just ID type support.
Data LocalizationUnknown
The pages do not provide clear information about data localization in India per RBI and DPDP requirements.
No source URL — Unknown
Consent ManagementUnknown
The pages mention cookie consent but do not clearly state how they handle consent withdrawal as required by DPDP.
No source URL — Unknown
Model ExplainabilityUnknown
There is no information provided about the explainability of their AI models.
No source URL — Unknown
Security CertsUnknown
The pages do not mention any specific security certifications such as SOC 2 Type II, ISO 27001, or PCI DSS.
No source URL — Unknown
Bias TestingUnknown
There is no evidence of published tests or audits for bias or discriminatory outcomes.
No source URL — Unknown
KYC, KYB, and AML APIs plus a no-code onboarding platform sold to banks and fintechs.
India relevance. Headquarters in Bengaluru. India API Marketplace is pitched to banks, NBFCs, and insurers, with a published RBI/UIDAI compliance claim.
Data LocalizationPass
India API Marketplace FAQ claims data residency within India; About also lists regional data-residence including India. Global privacy policy still names US and other jurisdictions — confirm the India contract.
Source: India API Marketplace FAQ ↗Consent ManagementUnknown
Privacy policy lets users withdraw consent, but as a processor Signzy redirects those requests to the customer. No DPDP consent-manager / withdrawal product page found.
No source URL — Unknown
Model ExplainabilityPass
Vendor blog on AI fake-ID KYC claims multi-signal risk scores with explainability for each flagged signal. Not a model card for every KYC model.
Source: AI fake-ID KYC blog ↗Security CertsPass
About page states ISO 27001, SOC 2 Type II, and PCI-DSS. Homepage separately marks ISO 27001 Certified and SOC 2 Compliant.
Source: About us — security FAQ ↗Bias TestingUnknown
No published fairness study, disparate-impact test, or bias-audit report found for Signzy KYC/biometric models.
No source URL — Unknown
Vendor ViabilityPass
Company blog republishes that Signzy raised ₹210 crore (~$26M) from Gaja Capital, Vertex Ventures, and Arkam Ventures. Bengaluru HQ and three India offices are listed on About.
Source: Signzy funding post ↗Sumsub provides a comprehensive KYC/AML solution for identity verification.
India relevance. Global KYC vendor. Confirm India data residency before using in a regulated stack.
Data LocalizationUnknown
The pages do not provide clear information about data localization in India.
No source URL — Unknown
Consent ManagementUnknown
There is no explicit mention of how the tool honors consent withdrawal as mandated by DPDP.
No source URL — Unknown
Model ExplainabilityUnknown
The pages do not provide information on whether the vendor can explain how their AI makes decisions.
No source URL — Unknown
Security CertsUnknown
There are no specific mentions of security certifications like SOC 2 Type II, ISO 27001, or PCI DSS.
No source URL — Unknown
Bias TestingUnknown
The pages do not mention any testing for discriminatory outcomes or fairness audits.
No source URL — Unknown
Vendor ViabilityUnknown
The vendor has demonstrated viability through claims of significant ROI and efficiency improvements.
No source URL — Unknown
Surepass provides identity verification APIs for KYC and AML compliance.
India relevance. Surepass offers services that comply with Indian regulations, including Aadhaar verification.
Data LocalizationUnknown
The pages do not provide explicit information about data storage locations in India.
No source URL — Unknown
Consent ManagementUnknown
The privacy policy mentions user consent but does not clearly state how consent withdrawal is managed per DPDP.
No source URL — Unknown
Model ExplainabilityUnknown
There is no information provided about how the AI models make decisions or their explainability.
No source URL — Unknown
Bias TestingUnknown
There is no evidence of published tests or audits regarding bias or discriminatory outcomes.
No source URL — Unknown
Vendor ViabilityUnknown
The page mentions a customer win with Google, indicating vendor viability.
No source URL — Unknown
Zoop provides digital onboarding and compliance solutions for enterprises in India.
India relevance. Zoop's services are tailored for the Indian market, focusing on KYC and regulatory compliance.
Data LocalizationUnknown
The pages do not provide clear information about data storage locations in compliance with RBI and DPDP requirements.
No source URL — Unknown
Consent ManagementUnknown
The privacy policy mentions consent but does not clearly state how consent withdrawal is managed per DPDP mandates.
No source URL — Unknown
Model ExplainabilityUnknown
There is no information provided about the explainability of AI models used by Zoop.
No source URL — Unknown
Security CertsUnknown
No specific security certifications such as SOC 2 Type II, ISO 27001, or PCI DSS are mentioned on the pages.
No source URL — Unknown
Bias TestingUnknown
There is no evidence of testing for discriminatory outcomes or fairness audits published by Zoop.
No source URL — Unknown
Vendor ViabilityUnknown
The vendor has a named entity and operates in India, indicating viability.
No source URL — Unknown