Skip to content
VerifiX, secured by ITSEC

Compliance infrastructure for UAE and GCC regulated entities

Made in the UAE

Run compliance in one place, and defend every decision

KYC, KYB, AML screening, transaction monitoring (KYT), and Travel Rule in a single decision engine, with case management, versioned risk rules, and one audit trail your regulator and your engineers can both work from.

  1. 09:14:02Verification created · journey uae_vasp_retail
  2. 09:14:09Document authenticated, face matched
  3. 09:14:11Screening run · 1 potential match
  4. 10:02:47Analyst reviewed match, requested source of funds
  5. 14:31:20Approved · evidence record sealed

Sample audit trail. Every step is one immutable row you can export as regulator evidence, UAE journeys pre-built, live API access in one click. Why VerifiX

app.verifix.ae
VerifiX Console
MO

Verifications today

128

Sample data

Pending review

9

Sample data

Screening hits

4

Sample data

Avg. decision time

41s

Sample data

Review queue

Open cases
  • AM

    Al Mira Digital Assets FZE

    Cleared

    KYB · UBO discovery

    3 owners resolved · registry match

    11:24
  • SK

    Sara K.

    Manual review

    KYC · Emirates ID + liveness

    Document authentic · biometric match 0.94

    11:09
  • TX

    Wallet bc1q…7f4a

    Escalated

    KYT · inbound transfer

    Exposure to high-risk counterparty

    10:52

Illustrative interface, sample data

Console, One queue for every alert, case, and decision.
Journeys pre-mapped

Six UAE authorities. Six journeys already built.

Onboarding sequences, checks, and review cycles configured per authority, for financial institutions, insurers, VASPs, and DNFBPs alike. Start from the journey for your license, then adjust thresholds to your own risk appetite.

UAE, journeys pre-built

  • VARAReady

    Virtual Assets Regulatory Authority, Dubai

    Virtual asset service providers

    01journey · uae_vara_vasp

  • CBUAEReady

    Central Bank of the UAE

    Banks, exchange houses, finance companies

    02journey · uae_cbuae_fi

  • CMAReady

    Capital Market Authority

    Capital market participants

    03journey · uae_cma_markets

  • DFSAReady

    Dubai Financial Services Authority

    DIFC-licensed firms

    04journey · uae_dfsa_difc

  • FSRAReady

    Financial Services Regulatory Authority, ADGM

    ADGM-licensed firms

    05journey · uae_fsra_adgm

  • MoEReady

    Ministry of Economy, DNFBP supervision

    DNFBPs and designated professions

    06journey · uae_moe_dnfbp

Wider GCC, next

  • SAMA, Saudi Central Bank
  • CMA KSA, Capital Market Authority, Saudi Arabia
  • CBB, Central Bank of Bahrain
  • QCB, Qatar Central Bank
  • QFCRA, Qatar Financial Centre Regulatory Authority
  • CBK, Central Bank of Kuwait
  • CBO, Central Bank of Oman

Regulator names are used to describe the journeys and frameworks VerifiX supports. They do not imply endorsement, approval, or affiliation.

Made in the UAE, for the UAE

Hosted in the UAE. Built to UAE law.

Compliance data is the most sensitive data your business holds. On VerifiX it never leaves the country to be verified, and the platform is engineered around the UAE Personal Data Protection Law and the expectations of UAE supervisors, not retrofitted from a European or US product.

VerifiX supports your own compliance program. It is not a regulator, and it does not confer a license or an approval.

Data stays in the UAE
Identity documents, biometric captures, screening results, case files, and the audit trail are held in UAE regions on AWS and Microsoft Azure. In-country by default, not as a paid add-on.
Built to the UAE PDPL
Data mapped by class, lawful-basis and consent capture in every journey, purpose limitation, configurable retention, and deletion and access workflows, designed to the Personal Data Protection Law from the first line.
ISO 27001 and ISO 22301
ITSEC, the company behind VerifiX, is certified to ISO/IEC 27001 for information security and ISO 22301 for business continuity. Certificates and the security pack are issued under NDA.
Written for UAE supervisors
Journeys, evidence records, and reporting are structured around what VARA, CBUAE, CMA, DFSA, and FSRA examiners ask to see, so a request for records is an export, not a project.

One platform replacing the stack

Stitching five vendors together is where compliance programs break

A document vendor, a sanctions list, a spreadsheet of UBOs, a chain analytics tool, and an inbox full of escalations. Every handoff is a gap in your audit trail, and you are the one holding it together.

  • 01Scattered evidenceScreenshots and emails instead of one case record.
  • 02Inconsistent decisionsThresholds live in people's heads, not in rules.
  • 03Slow onboardingManual rechecks on customers you already verified.
  • 04Audit exposureNo single trail from decision back to the evidence.

Pick your journey

Tell us your license and we will show the journey already built for it.

Built for compliance teams and engineers

The whole platform, surface by surface

Not a feature list, the actual objects you work with: endpoints, modules, regulator journeys, residency, Travel Rule transfers, and how it is priced.

01One API

One API for identity, business, screening, and transactions.

The same key and the same decision object cover KYC, KYB, AML screening, KYT, and the Travel Rule. Chain the checks you need in a single session, there is no second integration between pillars.

Read the API reference
api.verifix.aeREST · signed webhooks
  • POST/v1/verifications201
  • GET/v1/verifications/{id}200
  • POST/v1/businesses201
  • POST/v1/screenings201
  • GET/v1/cases/{id}/evidence200
  • POST/v1/travel-rule/transfers201

02Modular

39 checks you can turn on individually.

Every check is its own module, configurable, separately auditable, and visible in the decision it produced. 15 of them cover identity, documents, biometrics, and fraud signals; the rest cover business structure, screening, chain analytics, and platform controls.

See every module
workflow · uae_vasp_retaildrag to reorder
Document verificationNFC chip readData extraction and normalizationDatabase validationProof of addressPhone and email verificationCustom questionnairePassive livenessActive livenessFace match (1:1)Face search (1:N)Biometric re-authentication+ 27 more

03Pre-built journeys

UAE regulator journeys already configured.

Rather than handing you an empty rule builder, VerifiX ships journeys mapped to how each UAE regulator expects onboarding to run. Start from the journey for your license, then adjust thresholds to your own risk appetite.

Regulator by regulator
journeyseditable
  • VARAVirtual asset service providersready
  • CBUAEBanks, exchange houses, finance companiesready
  • CMACapital market participantsready
  • DFSADIFC-licensed firmsready
  • FSRAADGM-licensed firmsready

04UAE residency

Hosted in the UAE, run by a UAE company.

VerifiX runs on UAE regions of AWS and Azure and is built by ITSEC, which holds ISO 27001 and ISO 22301 certification. Residency scope by plan is confirmed when we issue your contract.

Security and data residency
deploymentUAE region
Hosting
AWS / Azure UAE regions
Operator
ITSEC, UAE
ISO 27001
Information security
ISO 22301
Business continuity

05Travel Rule

Counterparty data exchange at the UAE threshold.

Transfers at or above AED 3,500 carry originator and beneficiary data to the counterparty VASP, with unhosted-wallet proof of control where the counterparty is self-custodied. Exchange runs over Notabene and TRP.

How Travel Rule works
transfer · outAED 3,500 threshold
Originatoryour VASP
Notabene / TRP
Beneficiarycounterparty VASP

06Commercials

Priced per check, quoted in AED or USD.

Pricing is per module and per volume, quoted directly rather than published, so the checks you switch off are checks you do not pay for. Ask for the module price list and we will send it with your sandbox key.

Talk about pricing
quoteAED / USD
  • Document verificationper check
  • NFC chip readper check
  • Data extraction and normalizationper check
  • Database validationper check
  • Proof of addressper check

No published list price, we quote against your volume and module mix.

The customer journey

What your customer does on their phone

You send the verification link. VerifiX hosts the capture. Your team reviews the result.

Four illustrative VerifiX phone screens: open the verification link, scan an ID, take a selfie, and wait for a decision
Illustrative screens from the VerifiX Product Guide.
  1. 01

    Open the link

    Your system creates a session. The customer opens the verification link on their phone.

  2. 02

    Scan their ID

    The hosted page captures the document and checks its authenticity and extracted details.

  3. 03

    Take a selfie

    Liveness and face match connect the person completing the session to their document.

  4. 04

    Wait for your decision

    Flagged checks reach your review queue. Your team records the decision and its supporting evidence.

How it works

A verification, end to end

From the moment a customer starts onboarding to the day their risk profile changes, VerifiX runs every step, and records it.

  1. Step 01

    Connect

    Integrate through the REST API, SDKs, or the hosted verification flow. Sandbox first, production when you're ready.

    curl https://api.verifix.ae/v1/verifications \
      -H "Authorization: Bearer sk_test_..." \
      -d type=kyc \
      -d journey=uae_vasp_individual
  2. Step 02

    Configure risk rules

    Set thresholds, weighted risk factors, jurisdiction and product risk, and escalation paths for your organization.

    • Jurisdiction riskWeighted
    • Product riskWeighted
    • Adverse mediaEscalate to review
    • Sanctions matchBlock and alert
  3. Step 03

    Verify

    Run KYC and KYB checks with screening in the same decision, routed to review queues when rules require a human.

    Verification case

    VX-KYC-40218

    Manual review
    • Document authenticityClear
    • Liveness and biometric matchClear
    • Sanctions and PEP screeningHit
    Audit trail recorded, illustrative interface
  4. Step 04

    Monitor

    Keep customers and transactions under ongoing screening and monitoring, with a complete audit trail.

    Composite risk score

    62

    Elevated risk

    Jurisdiction risk
    +18
    Product risk
    +12
    Screening outcome
    +22
    Verified identity
    -10

    Weights are configurable per organization. Illustrative interface.

Run it yourself

Run this whole flow on your own onboarding in a sandbox key.

Trust and data handling

Security posture your reviewers can assess

UAE-region hosting, PDPL-aligned handling, and ITSEC's ISO certifications, laid out so your risk and audit reviewers can assess them line by line.

Review security posture
Certifications
ITSEC is ISO/IEC 27001 and ISO 22301 certified
Hosting region
UAE regions on AWS and Microsoft Azure
Data residency
Your records stay in the UAE
Retention policy
Set to the period your license requires
Availability target
Set in your contract
Data protection
Built to the UAE Personal Data Protection Law

Integrations

Fits your existing stack

Every integration surface is a documented endpoint or webhook, not a bespoke connector build. Named sources and systems are set in your contract.

All integrations
SystemDirectionInterface
Core platformTwo-wayPOST /v1/verificationsverification.decided
Data warehouseVerifiX → youGET /v1/eventsscheduled export
Workflow and alertingVerifiX → youcase.escalatedscreening.hit
Ticketing and CRMTwo-waycase.info_requestedPOST /v1/cases/{id}/notes
Identity and SSOYou → VerifiXSAML 2.0OIDCSCIM
Registries and screening dataManaged by VerifiXregistriessanctions and PEPchain analytics
Regulator-safe by default

Compliance you don't have to worry your way through

The stressful part of KYC is rarely the technology, it is wondering whether what you did will hold up when someone asks. VerifiX is built so the answer is already on file: UAE-hosted data, journeys mapped to your authority, and a complete evidence trail behind every decision.

  • VARA
  • CBUAE
  • CMA
  • DFSA
  • FSRA
Hosting
UAE regions on AWS and Azure
Certifications (ITSEC)
ISO 27001 and ISO 22301
  • Journeys mapped to your authority

    Pick your regulator and the onboarding sequence, checks, and review cycles are already configured, you are not designing a compliance flow from a blank page.

  • Evidence pack per case

    Every decision keeps the documents, screening results, scores, and reviewer actions that produced it, exportable as a single case file when an examiner asks.

  • Audit trail you did not have to build

    Who checked what, when, and on which policy version is recorded automatically, no spreadsheets reconstructed after the fact.

  • Ongoing obligations run themselves

    Rescreening and periodic review run on the cadence set for your license type, so lapses are not something you have to remember.

See VerifiX against your own onboarding flow

Request a sandbox, or walk through the platform with our team.