Manav.id
For KYC & fraud-risk platforms

The deterministic layer under your score.

Your models say how risky. Manav adds the primitive that says yes or no: when your score crosses the threshold, the user signs from an enrolled device — passkey + liveness — and your customer gets a receipt instead of a probability. We’re the step-up you trigger, not the score you compete with.

The receipt below was signed and checked in this tab, with zero network calls.

Never in your money pathNo biometric vaultVerify without us, forever
MANAV RECEIPT · v1 network: idle
…
Generating key & signing…
Ed25519 · WebCrypto · in this tab
actionaccount.stepup triggerrisk_score 74 · above customer threshold subjectmanav:human:7f3a9c…e21b outcomesigned · proceed assurancepasskey + liveness challenge issued—
Cryptographic fields
nonce— kid— sig—
Signed and verified in this tab — zero network calls. View source welcome.
The loss your customers are carrying
$5.75

the real cost of every $1 of fraud at US financial institutions — mostly investigation labor.

44%

of financial institutions still run fraud operations mostly or entirely by hand.

8.3%

of digital account-creation attempts flagged as suspected fraud; $3.3B lender exposure.

The determinism gap

A score in the gray zone becomes a manual review: minutes of analyst time, a false-positive cost your customers eat, and a decision nobody can later prove. The risk platforms themselves point at the answer — Sardine: phishing-resistant passkeys make an AiTM attack fail at step two. The score tells you when to demand proof. The receipt is the proof — and it closes the review in 30 seconds instead of a queue.

Sardine on AiTM & passkeys · Positioning: channel, not competitor — we produce no score and never will.
What fails without it: the synthetic identity that passes every data check, the mule who beats the model — neither can mint a live-human signature bound to an enrolled key.
What your platform gains: a resolution action for the gray zone (not another signal), lower manual-review cost for your customers, and an audit artifact that turns “the model said 74” into “a live human signed.”
Where it sits in your product

Three integration points. Your brand, our receipt.

Score-triggered step-up

One rule in your engine: above threshold → sign(). Below: untouched. Your customers set the line.

Receipt on the decision

Every step-up returns an offline-verifiable receipt your customers attach to the case file — re-performable by their auditors.

Enrollment as an asset

Each verified human strengthens your customer’s population without you storing a biometric — nothing new to breach.

// Before the consequential action, from your backend:
const receipt = await manav.sign({
  action: 'account.stepup',
  payload: { caseId, riskScore },
  subject: user.principal,
  assurance: 'passkey+liveness',
});
if (receipt.ceremony === 'completed') proceed(receipt.id);
// Anyone verifies the receipt offline against our published JWKS — forever.
Structurally neutral. The receipt format and verifier are Apache-2.0 open source, filed at the OpenID Foundation and IETF. You embed a standard, not a competitor.
Nothing of yours flows through us. Payloads never leave your systems — only hashes. A Manav outage can’t block your product: issuance pauses, every existing receipt still verifies.
Verification is free for everyone, forever. Your customers’ auditors, banks and counterparties check receipts with one public key — that’s what makes the receipt worth issuing.
We’re early and say so. No fake logos — the mechanism runs in this page. See the whole platform — the receipt, the gateway, the mechanism →
Try it before you talk to us

Run the ceremony yourself. Then try to fake it.

A controlled sandbox of the exact flow above — your system asks, the enrolled human signs on their own device, a receipt is issued, and you attack it. Real Ed25519, in this tab, nothing sent anywhere.

Next step

A 30-minute integration conversation.

Bring the flow in your product where this belongs. We’ll run the ceremony on it and hand you a receipt you can verify yourself before the call ends — and a straight answer on what an embed looks like commercially.

Step 1 of 2

Talk to us about embedding

No biometrics, no tracking pixels. Your email goes to one inbox and nowhere else.
Step 2 of 2

Where would it sit?

Something went wrong. Email [email protected] and we’ll sort it.
✓

Request received.

You’ll get times from [email protected] within one business day — reply to lock one in.

We’re early, and we’d rather say so than fake logos: the receipt format and verifier are public, Apache-2.0 open source, and the mechanism above just ran in your browser. Judge it before you ever talk to us.