Highlights
3 years in a row named a Leader First to achieve iBeta Level 3 on iOS and Android Introducing GovFaceMatch Privacy is the architecture
01/04
01/04

Incode Platform

Identity orchestration, end to end

Build verification workflows, decide in real time, investigate fraud, and meet compliance requirements, all from one dashboard.

0B+ identity checks a year
0+ in-house ML models
0+ countries and territories
0% average uptime

Inside the dashboard

Seven capabilities, one command center

Retire the duplicate tools. Every workflow, decision, and review lives in one place.

Design and ship verification flows visually, no code required.

  • Drag-and-drop workflow builder
  • Templates for identity verification, KYC, KYB, age verification, and account recovery
  • Condition nodes chained with AND or OR logic
  • One workflow across hosted link, Web SDK, and mobile SDK

Your brand on every step, across mobile, web, and embedded flows.

  • Colors, fonts, and layout configured in Incode Studio
  • Live preview across iOS, Android, and web before you publish
  • Custom CSS when you need an exact match to your design system

Full visibility into every session, and the why behind every outcome.

  • Pass, fail, warn, or manual review on every session
  • Module-level scores for document, liveness, face match, and device
  • A plain-language summary of what drove the decision

Conversion, approvals, and fraud trends, filterable down to the session.

  • Custom dashboards built from any signal, with no external BI tool
  • Funnel drop-off, rejection reasons, and fraud vector breakdowns
  • Filter by workflow, device, geography, and date

Investigate flagged sessions and close them out with an audit trail.

  • Escalation to manual review from any session
  • Linked sessions and fraud rings surfaced by Trust Graph
  • Evidence bundle export as a tamper-evident PDF

Plug into your stack with SDKs, APIs, and pre-built connectors.

  • REST API and iOS, Android, and web SDKs
  • Pre-built connectors for Okta, Microsoft Entra, ServiceNow, Salesforce, Workday, Slack, Zoom, and more
  • OpenID Connect for anything custom

Accessible journeys across abilities, languages, and devices.

  • Screen-reader and assistive technology support
  • Alternative verification paths when a check does not fit a user
  • Contrast, typography, and focus states inherited from Prizma, Incode's design system

Why leading enterprises choose Incode

Built on data no one else has

The data advantage

Fraud models powered by billions of real checks and hundreds of millions of identity profiles.

7.1B+ trust checks · 400M profiles

AI built in-house

Every model is ours, trained on our data and tuned for fraud at scale, from liveness to document forensics.

35+ in-house ML models

Enterprise-grade

End-to-end coverage with the reliability your riskiest flows demand.

99.9% average uptime

High-trust decisions

Deepfake and gen-AI fraud defense runs on every decision, as part of the platform rather than an add-on.

Gen-AI fraud defense built in

FAQ

Frequently asked questions

Still have questions? Talk to an expert
What is an identity orchestration platform?

An identity orchestration platform runs every identity check from one place instead of stitching point solutions together. Document verification, liveness, face match, device and behavioral signals, government and database checks, and AML screening run as modules inside a single workflow, configured in one dashboard and called through one API.

Can I build verification workflows without engineering?

Yes. The workflow builder is drag and drop. Your team assembles modules on a canvas, starting from a blank flow or a template for cases like identity verification, KYC, KYB, step-up age verification, and account recovery, then publishes without writing code. The same workflow runs whether the session arrives through a hosted link, the Web SDK, or a mobile app.

How does conditional logic work?

Condition nodes route users on the output of any module. Each node follows an if-then structure: pick a signal, set an operator and a value, define the path, and chain conditions with AND or OR. Every branch ends in one of four outcomes: pass, fail, warn, or manual review.

Can I set different rules by country, risk level, or use case?

Yes. Accepted document types are scoped globally or market by market, drawn from a catalog of more than 4,900 documents, and thresholds are adjustable per check so separate flows can run per region or product line. Verification rules sit above the modules and can force a completed session to pass, fail, or route to review.

What integrations does Incode support?

More than this page can list. Incode connects through a REST API, web and mobile SDKs, a hosted verification experience, and pre-built connectors across identity and access management, ITSM, HR, CRM, video conferencing, and messaging, with OpenID Connect for anything custom. To check a specific tool in your stack, talk to an expert.

How does fraud case management work?

Flagged sessions land in the sessions view with the decision, the score behind every check, and a plain-language summary of what drove the outcome. Reviewers open the connected sessions that Trust Graph surfaces, escalate to manual review, and export an evidence bundle as a PDF where each page carries a hash, so any later change to the document is detectable.

How does the platform protect against account takeover?

High-risk moments trigger step-up verification: face authentication against the identity enrolled at onboarding, supported by device intelligence, behavioral signals, and velocity checks. Because the same platform ran the onboarding, the step-up compares the user to their verified identity instead of to a password or a one-time code.

How do I know whether a workflow change worked?

Analytics are built into the dashboard, with no external BI tool required. Teams track session volume, funnel drop-off by step, top rejection reasons, and fraud vectors, and build custom widgets from any available signal. Precision, recall, and accuracy views show whether current thresholds catch fraud without rejecting legitimate users.

Where is my data stored, and who controls it?

You choose a deployment region when your organization is created, and that setting carries through storage, processing, and backups. Retention is configurable field by field, role-based controls restrict who can see sessions and identities, and every retention and deletion event is logged for audit.

What's next

Take a look inside the dashboard