The score is an evidence graph, not a document checklist.

Six signal groups resolve one application against its credentials, device, economic footprint and connected infrastructure.

The six signal groups

Production modules use the same six signal definitions and evidence language.

Identity coherence

Compares names, dates, addresses and application origin across credentials.

  • Name agreement across PAN and Aadhaar
  • Date of birth consistency
  • Address token consistency
  • Gender consistency across credentials
  • Application origin distance
  • Distinct linked name spellings

Credential vintage

Reads issuance age, linkage, CKYC history and identifier reuse.

  • PAN issuance vintage
  • PAN and Aadhaar linkage
  • CKYC record vintage
  • KYC identifier reuse

Telecom and device

Checks mobile tenure, recent telecom events, device reuse and location alignment.

  • Mobile number age
  • SIM swap recency
  • Mobile number linked to the identity
  • Port-out recency
  • Mobile revocation status
  • Device application reuse
  • Device integrity
  • Device origin alignment

Economic footprint

Separates a thin credit file from an absent or manufactured pattern of activity.

  • Bureau history
  • Credit enquiry velocity
  • Salary or income regularity
  • Statement counterparty diversity
  • Statement dormancy
  • Credit-line seasoning pattern

Network and cluster

Maps shared addresses, beneficiary accounts, face matches and submission timing.

  • Address reuse across applications
  • Shared beneficiary account
  • Face vector reuse
  • Submission timing correlation
  • Resolved ring membership

Behavioural

Measures how identity fields were entered against the form baseline.

  • Paste ratio on identity fields
  • Date of birth hesitation
  • Identity field revisits
  • Session duration against baseline

The network adds evidence. It is not the starting condition.

A buyer should not have to join a consortium to learn whether the product works on its own book.

  • Useful on day one

    Identity consistency, credential vintage, telecom and device evidence, economic footprint and behavioural signals work against the institution's own application data.

  • Improved by local history

    Address, device, beneficiary and face reuse become stronger as prior applications and outcomes are resolved into the institution's graph.

  • Extended by membership

    Permitted consortium matches can reveal a ring that crosses institutions without exposing another member's customer record.

  • Never dependent on the network

    A member receives standalone value before any cross-institution signal is enabled. Network evidence is an additional source, not a requirement for a score.

How the model reaches a decision

Entity resolution turns tokenised evidence into an identity graph. A graph model evaluates node and relationship evidence, while segment calibration maps the result to policy bands.

Hard overrides cap the score when a revoked mobile, repeated face vector or high-velocity device makes the graph evidence decisive.

  1. InputTokenised application
  2. ResolutionIdentity graph
  3. InferenceSignal contributions
  4. PolicyBand and action

Deployment follows the institution's boundary.

Most banks will not send onboarding records to a vendor cloud. The scoring interface does not require them to.

  • Hosted API

    Tokenised requests reach an India-region service boundary. Raw direct identifiers do not leave the member environment.

  • Dedicated VPC

    The inference service runs in an isolated network boundary connected to the institution's onboarding systems.

  • On-premise containers

    Banks that cannot send onboarding evidence to a vendor cloud can run the scoring service inside their own environment.

  • Offline backtest

    Historical files are scored in a controlled batch environment before any production integration is approved.

One decision request. One outcome callback.

The synchronous surface stays small. Evidence expansion and case review use the application identifier returned with the decision.

POST /v1/personhood/score
{
  "applicationId": "app_20481",
  "identityToken": "tok_7fd2",
  "mobileAgeDays": 728,
  "bureauHistoryMonths": 0,
  "addressReuseCount": 1
}
200 response
{
  "score": 64,
  "band": "Thin",
  "recommendedAction": "step_up",
  "reasonCodes": [
    "thin_footprint",
    "identity_coherent"
  ]
}

Confirmed outcomes close the loop.

The feedback webhook records confirmed fraud, clean performance and analyst outcomes. Federated training can then improve local weights without moving the member's customer rows into a common table.

A model should improve from the institution's labels without taking ownership of its customer data.

Latency is contracted after the deployment path is tested.

We do not publish an unattested response-time claim. The pilot measures service processing and network transit under the institution's expected load, then writes the production SLO against that result.

Start with a file, not an integration project.

The retrospective backtest exercises the signal model and produces the first calibration discussion before production architecture is chosen.

Book a backtest