This is a sample report — every analysis you run looks like this.

77Viability

PROCEED WITH CAUTIONExisting business

Privacy-Preserving Age Verification API

Generated Jul 29, 2026

Overview

Scorecard

Click any dimension to see why it scored that way. The percentage is how much it counts toward the score above.

Market Opportunity20%78

Age assurance is becoming a mandated purchase category across the UK, EU and parts of the United States, with unusually strong urgency among large consumer platforms. The reachable market is materially smaller than the broad digital-identity market, however, and major platform accounts are concentrated, slow-moving and capable of building or buying alternatives.

Differentiation17%81

A reusable, consumer-held cryptographic credential directly addresses privacy, breach exposure and data-minimization concerns better than a platform-held verification result. The caveat is that this advantage only becomes decisively valuable if relying platforms accept the credential broadly and consumers encounter it frequently enough to value reuse.

Monetization17%87

The reported $6.4M ARR, 91% gross margin, 143% net revenue retention, 2.1% logo churn, nine-month CAC payback and recent EBITDA profitability are exceptional operating indicators for enterprise compliance software. The principal weakness is customer concentration and the possibility that large-platform pricing becomes procurement-led rather than value-led.

Competitive Openness13%52

The field contains credible, well-funded incumbents including Yoti, Persona, Incode and K-ID, plus large identity infrastructure vendors such as Entrust, Veriff and Jumio. The market is not closed, but competitive intensity will rise sharply as regulation converts into enterprise procurement.

Defensibility13%69

Certification lead times, integrations, trust posture and 4.2M issued credentials create meaningful barriers. The network effect is promising but not yet proven as a durable moat: incumbents can issue reusable credentials, standards may commoditize assertions, and app stores or operating systems could control the consumer wallet layer.

Investment Attractiveness11%78

The combination of rapid growth, retention, margins, compliance-driven demand and an emerging network effect is Series B investable. Investors will nevertheless scrutinize whether the credential becomes a standard or remains a feature, whether revenue is concentrated in a few accounts, and whether regulation survives legal and political challenges.

Market Timing9%91

This is a narrow window before major 2026-2027 implementation deadlines force platform decisions. Waiting risks losing design-ins and procurement frameworks to incumbents; acting too aggressively risks funding capacity for regulations that are delayed, narrowed or inconsistently enforced.

Ease of Executionnot counted in the score43

Operating cross-border identity assurance is inherently difficult: regulatory interpretation, fraud operations, document and carrier coverage, cryptography, accessibility, enterprise security reviews and catastrophic breach risk all require specialized teams. Existing certifications and profitability reduce, but do not eliminate, this complexity.

Key Risks

• The reusable-credential advantage may not become a cross-platform standard before incumbents copy it or operating-system wallets absorb it.
• A small number of large platform contracts could determine the outcome, creating concentration and long enterprise-sales cycles.
• Age-assurance mandates remain politically contested and legally uneven, particularly in US states.

Key Opportunities

• Use the 2026-2027 compliance deadline window to win platform-wide contracts before procurement standards harden.
• Convert the 4.2M credential base into measurable repeat-verification savings and lower abandonment for customers.
• Establish interoperability and privacy standards that make the company's credential a preferred relying-party format.

Executive Summary

PROCEED WITH CAUTION

Raise a Series B if management can demonstrate a credible pipeline of large platforms, quantify repeat-credential conversion, and secure at least two anchor commitments or advanced procurement processes. The business is already capital-efficient; therefore, the financing should be sized around a 24-30 month plan with explicit milestones, rather than maximizing valuation or headcount.

The company provides age and identity assurance through an API and SDK for consumer platforms facing age-verification obligations. Users verify through government identity documents, banking credentials or mobile-carrier records; the platform receives a signed assertion rather than the underlying identity document.

Its strategic distinction is a reusable consumer-held credential. Once a consumer has been verified, subsequent checks at participating platforms can be nearly instantaneous, potentially reducing platform friction, verification cost and liability from storing sensitive documents. The company reports 4.2M credential holders, creating an early but not yet unassailable network asset.

Commercial traction is substantial: $6.4M ARR, 118% year-over-year growth, 61 enterprise customers, 91% gross margin, 143% net revenue retention, 2.1% annual logo churn, nine-month CAC payback and two EBITDA-positive quarters. Certification under the UK's age-assurance scheme, SOC 2 Type II, ISO 27001 and EU conformity work create practical barriers to entry.

The immediate choice is whether to fund a concentrated land-grab for large platforms before 2027 compliance deadlines. The recommended answer is to raise a disciplined, milestone-based Series B only if it is explicitly designed to win a defined list of strategic platforms and lock in credential interoperability; indiscriminate geographic expansion would dilute the strongest advantage.

Key Findings

Reported operating metrics are strong enough to support a growth round, not merely a survival round.
Compliance demand is real, but statutory obligation does not automatically determine which technical approach regulators, platforms or consumers will accept.
Reusable credentials are genuinely differentiated on privacy and user experience, but can be copied technologically unless protected by distribution and standards adoption.
The largest strategic risk is platform concentration: two app stores may be powerful reference accounts but also exert extreme purchasing leverage.
The best near-term segment is high-risk, high-volume consumer platforms where abandonment, data-minimization and auditability all matter.
A Series B should fund named-account wins, regulatory coverage, fraud resilience and interoperability—not broad sales hiring without account-level evidence.

Confidence Metrics

Data Availability

MEDIUM

Overall Confidence

Lowest Confidence Sections

Financial Projections: projections rely on self-reported metrics and no detailed bookings, concentration, pricing or expense data.
BCG Growth-Share Analysis: reliable category-wide market-share data for age assurance is not publicly available.
Differentiation Recommendations: the credential network's actual reuse rate and consumer behavior were not provided.
Blue Ocean Strategy: the degree to which buyers value portability over conventional verification coverage requires primary evidence.

Recommended Manual Research

Audit the reported ARR, NRR, churn, gross margin, CAC payback and EBITDA calculations using finance-system data.
Measure top-five and top-ten customer concentration, renewal dates, termination rights and gross-margin contribution.
Obtain customer-level evidence on credential reuse, completion, abandonment and direct-cost savings.
Interview 15-20 strategic platform buyers about independent providers versus app-store, device-wallet and in-house approaches.
Secure jurisdiction-specific legal opinions on whether the product's assurance level satisfies priority UK, EU and US use cases.
Benchmark fraud, false-accept, false-reject and account-recovery performance against competitors and regulatory expectations.

Problem & Market

Problem Severity

Score 88/100

Pain severity

9/ 10

How much this problem actually hurts today. Below 4 and people live with it happily.

Type of pain

Painkiller

An urgent problem people already spend money to make go away. Easiest to sell.

Who feels it most

General counsel, trust and safety leaders, chief product officers, compliance teams and security leaders at consumer platforms that serve minors or sell regulated goods online.

What they do today

Self-declared date of birth or age gates, which are weak against deliberate misstatement.Manual document upload and review, which creates abandonment, operational expense and sensitive-data custody.Single-use third-party age checks that return a result but require users to repeat verification across services.Geoblocking, restricting features or withdrawing from jurisdictions with unclear rules.Estimating age from facial analysis or behavioral signals, which can create bias, accuracy and regulatory concerns.

Evidence they'll pay

Non-compliance can expose platforms to regulator investigations, app-store restrictions, reputational damage and penalties linked to global turnover under UK and EU regimes. The company's reported $6.4M ARR across 61 enterprises, high retention and expansion provide direct evidence that buyers pay for the category.

What real people are saying

r/privacy frequently criticizes passport-upload requirements and asks for privacy-preserving proof-of-age options.
r/technology and r/UKPolitics discussions around the Online Safety Act show anxiety about age checks becoming identity databases.
r/webdev discussions focus on implementation burden, regional inconsistency and conversion loss from verification flows.

Forums & reviews

IAPP and identity-industry discussions emphasize data minimization, verifiable credentials and controller/processor allocation.
Online gambling compliance forums focus on KYC speed, fraud prevention and audit trails rather than consumer-held portability.
App developer communities discuss state age-assurance laws and uncertainty over app-store versus developer responsibility.

Search demand

Search interest around 'age verification API', 'age assurance', 'Online Safety Act age assurance' and state social-media age-verification requirements rises around legislative announcements, enforcement dates and app-store policy changes; demand is event-driven rather than consumer-search-led.

Key Risks

• Platforms may choose the cheapest compliance interpretation rather than the strongest privacy architecture.
• Regulators may accept different assurance methods by use case, reducing the need for universal identity proof.
• Consumers may resist any flow perceived as mandatory digital ID.

Key Opportunities

• Frame the product as a way to meet age-assurance duties without creating a new identity-document database.
• Quantify conversion and repeat-use advantages against document-upload verification.

Industry Analysis

Score 74/100

Geography Specifics

Is GlobalNo

Primary Geography

United Kingdom, European Union and United States

Localization Requirements

Country-specific accepted evidence sources, including national IDs, bank credentials and mobile-carrier coverage.
Localized language, accessibility and appeals processes.
Jurisdiction-specific data residency, retention, controller/processor terms and age-threshold configuration.
Legal mapping of assurance level to each platform use case.

Local Market Characteristics

The UK has comparatively developed age-assurance expectations under the Online Safety Act and active public scrutiny of privacy.
EU requirements are shaped by the Digital Services Act, GDPR data-minimization principles, national implementation differences and the evolving EU Digital Identity Wallet.
The US is fragmented by state law, litigation and federal uncertainty; market access may be driven by app-store policy as much as statute.

Identified Industry

Cross-border age assurance and privacy-preserving digital identity infrastructure

Industry Advantages

Regulatory demand is less discretionary than typical SaaS spending.
Once integrated into checkout, onboarding or account creation, switching can be operationally costly.
Digital delivery supports high gross margins and international expansion.
Reusable credentials can reduce marginal verification cost and user friction over time.

Industry Disadvantages

Legal requirements differ materially across jurisdictions and continue to evolve.
Identity verification has adversarial fraud dynamics, including deepfakes, synthetic identities and credential theft.
Large buyers have concentrated bargaining power and often conduct exhaustive procurement reviews.
The category attracts both specialist startups and powerful incumbent identity vendors.

Regulatory Environment

Regulation is a tailwind but not a single harmonized mandate. The UK Online Safety Act imposes child-safety duties on in-scope services and Ofcom has published age-assurance guidance. The EU Digital Services Act requires stronger protection for minors by platforms, while GDPR strongly favors data minimization. US state laws vary widely, several face constitutional challenges, and responsibility may shift between apps, app stores, parents and device providers.

Industry Characteristics

High gross-margin software economics after expensive initial compliance, fraud and integration investment.
Trust and certification act as gatekeepers; enterprise security reviews are lengthy and difficult to shortcut.
Demand is driven by regulation, risk events and platform policy, creating deadline-based buying cycles.
Identity-proofing suppliers, document databases, banks, carriers and device ecosystems are important upstream dependencies.
A breach, false-positive controversy or fraud incident can quickly become a board-level reputational event.

Industry Specific Metrics

Metric

Gross margin

Benchmark

70-90% for mature API-led identity software; lower when manual review or paid data-source checks dominate.

Plain Explanation

Gross margin shows how much revenue remains after directly serving each verification.

Metric

Verification completion rate

Benchmark

Well-designed age flows generally target more than 85% completion among eligible users, varying by country and method.

Plain Explanation

Completion rate is the percentage of users who successfully finish verification rather than abandon.

Metric

False accept and false reject rates

Benchmark

Targets depend on assurance level, but enterprise buyers expect documented thresholds, ongoing monitoring and auditable exception handling.

Plain Explanation

These rates measure how often an underage or fraudulent user passes, or an eligible user is incorrectly blocked.

Metric

Enterprise sales cycle

Benchmark

6-18 months for regulated enterprise platform deals, often longer for app stores and major social networks.

Plain Explanation

Sales cycle is the time from serious buyer engagement to a signed contract.

Key Risks

• Fragmented rules can turn a single product into many costly country-specific compliance variants.
• EU Digital Identity Wallet initiatives may create a powerful public-standard alternative.
• A high-profile privacy or accuracy failure could trigger regulator scrutiny across markets.

Key Opportunities

• Certification and compliance operations can become a scalable trust asset.
• The company can become the neutral relying-party layer between wallet providers, platforms and consumers.

Seasonality

Demand is primarily regulatory and procurement-driven, with stronger pipeline activity before enforcement deadlines and enterprise budget finalization; consumer verification volume also rises around holidays for alcohol, gaming and commerce.

Jan

Feb

Mar

Apr

May

Jun

Jul

Aug

Sep

Oct

100

Nov

Dec

What this means: Build sales capacity and implementation readiness before regulatory deadlines and Q4 budget cycles; ensure fraud operations and infrastructure can handle holiday volume spikes in gambling and regulated retail.

Market Analysis

Score 78/100

The relevant market is narrower than global identity verification: it is recurring software and transaction spend by consumer-facing platforms needing age assurance in the UK, EU and US. Regulation is expanding demand, but actual spend depends on enforcement, acceptable assurance methods and whether platforms centralize verification through app stores or device ecosystems.

Market Size

TAM

$8.0B

SAM

$1.65B

SOM

$85MFive years

What are these? TAM is total worldwide category spend; SAM is the slice you could serve; SOM is what you can realistically capture in a few years. For scale: global ride-hailing is ~$200B (TAM-sized), a single metro's slice might be ~$500M (SAM-sized).

18-24% CAGR 2025-2030 for identity verification and age-assurance demand, with sharp short-term step-ups around regulatory enforcement dates.GROWING

Market Size Forecast

Key Trends

HIGHAge assurance moves from policy debate to implementation. Platforms increasingly need auditable decisions, documented risk assessments and operational controls rather than voluntary age gates.
HIGHPrivacy-preserving proof replaces document collection. GDPR principles, consumer distrust and breach exposure favor selective disclosure and minimal-data assertions.
HIGHWallet and credential standards emerge. EU Digital Identity Wallet and W3C verifiable credential ecosystems could validate the company's architecture or shift value to wallet issuers.
HIGHApp stores become policy gatekeepers. Major app stores can shape which party verifies age, what APIs are allowed and which providers gain distribution.

Target Segments

Large social and user-generated-content platforms

$450M-$700M annual spend

Pay: HIGHReach: LOW

High regulatory exposure and enormous volume, but few accounts, long procurement cycles and substantial bargaining power.

Online gambling and betting operators

$250M-$400M annual spend

Pay: HIGHReach: MEDIUM

Already accustomed to KYC and compliance spend; the opportunity is faster, lower-friction age proof rather than replacing full AML identity processes.

Alcohol, vape and regulated-goods e-commerce

$150M-$250M annual spend

Pay: MEDIUMReach: HIGH

Large fragmented segment with lower ACV but faster sales cycles and strong fit for reusable checkout credentials.

App stores, mobile ecosystems and developer platforms

$250M-$450M annual spend

Pay: HIGHReach: LOW

Strategically transformative accounts that can centralize distribution, but they may ultimately internalize the function.

Target Persona (ICP)

Score 82/100

Your first buyer

A UK, EU or US consumer platform with more than one million monthly active users or material regulated-goods volume, a board-visible minor-safety obligation, and a need to avoid collecting identity documents directly.

Profile: B2B firmographics: digital platform, marketplace, gaming, gambling, app-distribution or regulated e-commerce company; $100M+ revenue or rapid scale; multi-jurisdiction consumer footprint; formal legal, security and trust-and-safety functions.
Who decides: Economic buyer is usually the chief product officer, chief legal officer, chief trust and safety officer or chief compliance officer. Security, privacy, engineering, procurement and regional legal teams each hold veto power; the end user is the platform's consumer.

What frustrates them

Meeting country-specific age-assurance requirements without degrading signup or checkout conversion.
Avoiding storage of passports, selfies and identity records that increase breach liability.
Proving compliance to regulators, app stores, payment partners and boards.
Managing repeat verification across multiple products and markets.

What they want

Deploy a defensible solution before an enforcement deadline.
Reduce age-check abandonment and support tickets.
Minimize personal-data custody and audit scope.
Avoid a public incident involving minors, fraud or privacy.

Where to reach them

IAPP Global Privacy SummitIdentity Week EuropeMoney20/20 EuropeIGB Live and SBC Summit for gamblingTrust and Safety Professional Association eventsOfcom, European Commission and state regulator consultations

What makes them buy

A new statutory deadline, regulator inquiry or enforcement action.

Expansion into the UK, EU or a restrictive US state.

An app-store policy change requiring age declarations or assurance.

A privacy review that rejects direct document collection.

A competitor's public safety or compliance incident.

Objections & how to answer

Consumer-held credentials may not cover enough users initially; counter with credential-coverage data, fallback methods and conversion benchmarks.
A new vendor may add integration and vendor-risk burden; counter with SDK maturity, certifications, implementation SLAs and reference accounts.
We already use KYC; counter by showing that age-only proof can lower cost, friction and retained-data scope.
Regulation is uncertain; counter with configurable policy rules and contract structures tied to deployment milestones.

Secondary personas

Online gambling compliance director

Needs rapid proof of legal age and jurisdiction while preserving an auditable record for gaming regulators.

Differs by: More focused on fraud, AML adjacency and regulator auditability than broad privacy positioning.

Regulated e-commerce operator

Needs simple checkout age gates for alcohol, nicotine or adult products.

Differs by: Lower ACV and faster decisions; integration ease and per-check pricing matter more than enterprise governance.

Platform privacy counsel

Evaluates whether the architecture minimizes controller obligations, retention exposure and international-transfer risk.

Differs by: Can be a powerful internal champion but needs legal substantiation, not only product claims.

Key Risks

• Enterprise decisions require alignment across legal, security, product and procurement, extending cycles.
• The largest accounts may demand bespoke product commitments.

Key Opportunities

• Sell to privacy counsel and trust-and-safety leaders jointly, rather than treating verification as an engineering tool purchase.
• Create vertical playbooks for gambling, social platforms and regulated commerce.

Market Timing

Score 91/100

Why Now

UK online-safety implementation has made age assurance an operational requirement rather than a future policy discussion.
EU platform obligations and digital-identity initiatives are increasing demand for auditable, privacy-preserving age proof.
US state-level laws are creating immediate compliance decisions despite uneven legal outcomes.
Public concern about children online coexists with strong resistance to unnecessary identity-document collection, favoring selective disclosure.
The company already has certification, enterprise traction and 4.2M credentials before the most consequential deadline period.

Timing Risks

Court challenges delay US mandates.
Regulators permit lower-assurance approaches that reduce urgency.
Platform-level solutions emerge before the company locks in broad acceptance.
Rapid regulation creates demand faster than the company can implement without quality failures.

Why Not Later

By 2027, major platforms may have selected vendors, built internal systems or adopted app-store and wallet standards. Late entrants will face incumbent integrations and lower willingness to switch.

Why Not Earlier

Before recent regulation and public scrutiny, many platforms could rely on self-declared ages and had insufficient reason to absorb verification friction or cost. Reusable credentials would have had less immediate buyer urgency.

Market Readiness

PERFECT

Readiness Rationale

The category has crossed from conceptual demand into budgeted implementation, while market structure and standards remain unsettled enough for a differentiated provider to shape them.

Key Risks

• Deadline timing may slip by jurisdiction.
• The company may mistake regulatory attention for signed-budget availability.

Key Opportunities

• Pre-deadline procurement creates a window for multi-year commitments.
• Early standard-setting participation can shape future requirements.

PESTLE Analysis

Score 71/100

External conditions are broadly favorable, especially regulation and privacy expectations, but the same political and legal forces that create demand can reverse or fragment it.

PoliticalMixed

Child online-safety agendas in the UK, EU and US statesPolitical backlash against digital-ID expansionNational sovereignty over identity infrastructure

Governments are increasing pressure on platforms to protect minors, but policymakers differ sharply on whether age checks should be platform-, parent-, device- or state-led.

EconomicPositive

Compliance budgets are more resilient than discretionary software budgetsEnterprise procurement scrutiny remains highVerification volume can scale with digital commerce and gaming

Regulatory urgency supports spend, yet large buyers will still negotiate hard and seek to consolidate vendors.

SocialPositive

Growing concern about children onlineConsumer privacy anxiety around uploading IDsDemand for low-friction digital experiences

The product aligns with both child-safety and privacy concerns, but public trust can collapse if it is perceived as a surveillance mechanism.

TechnologicalMixed

Verifiable credentials and selective disclosureAI-enabled document fraud and deepfakesDevice wallets and passkeysFacial age-estimation advances

Credential technology validates the architecture, while fraud advances and platform wallets create continuous technical and strategic pressure.

LegalPositive

UK Online Safety ActEU Digital Services Act and GDPREU Digital Identity WalletFragmented US state statutes and constitutional litigation

Law is the core demand engine, but varying standards and litigation require continuous legal product management.

EnvironmentalNeutral

Digital verification avoids physical checksCloud and biometric processing consume energyNo material direct environmental buying driver

Environmental factors are secondary, though efficient architecture and responsible cloud procurement can support enterprise ESG requirements.

Competition & Strategy

Competitor Analysis

Score 52/100

The market is crowded with identity-verification specialists, age-assurance providers and large trust-infrastructure vendors. The company's strongest wedge is not basic document verification but privacy-preserving reuse across relying parties; this must be demonstrated as a measurable operational and conversion benefit, because competitors can describe similar privacy outcomes.

Positioning Map

Whitespace: The company occupies attractive whitespace at the intersection of high privacy and platform-grade assurance, but must raise enterprise scale credibility faster than incumbents raise their reusable-credential capability.

Direct Competitors

Yoti

HIGH threat

UK-founded digital identity and age-assurance provider offering age estimation, document verification and digital identity products.

Revenue: Not publicly disclosedFunding: Privately held; funding and ownership details vary by source

Strengths

Strong UK brand and regulatory visibility
Broad age-assurance product suite
Established public-sector and enterprise relationships

Weaknesses

May be perceived as a conventional identity vendor by privacy-sensitive platforms
Broad product scope can make focused platform positioning less sharp

Persona

HIGH threat

Enterprise identity-verification platform with workflow orchestration, document, biometric and fraud capabilities.

Revenue: Not publicly disclosedFunding: Venture-backed; raised significant growth funding

Strengths

Modern developer experience
Strong enterprise workflow product
Well-funded and credible with technology companies

Weaknesses

Core proposition is broad identity orchestration rather than cross-platform consumer-held age credentials
May retain a platform-centric verification model

Incode

HIGH threat

Identity verification and fraud-prevention provider using document, biometric and identity intelligence products.

Revenue: Not publicly disclosedFunding: Venture-backed with major late-stage financing

Strengths

Large funding base
Deep biometric and fraud capabilities
Enterprise and financial-services credibility

Weaknesses

Broader identity stack may have higher complexity and cost
Reusable privacy credential is not its primary market identity

K-ID

HIGH threat

Digital compliance platform focused on age-appropriate experiences and youth-safety requirements for games and digital services.

Revenue: Not publicly disclosedFunding: Venture-backed

Strengths

Strong youth-safety and gaming specialization
Policy and jurisdictional rules expertise
Relevant to app and game developers

Weaknesses

Less centered on portable cryptographic proof and broad identity-source coverage
May be more compliance-workflow than credential-network oriented

Veriff

MEDIUM threat

Global identity-verification provider focused on document and biometric verification.

Revenue: Not publicly disclosedFunding: Venture-backed

Strengths

Large document coverage
Global operating footprint
Established fraud and identity operations

Weaknesses

Verification is generally merchant or platform centered
Direct-document approach can preserve customer data-custody concerns

Indirect Competitors

AppleHIGH

Device and app-store age-assurance features could centralize age signals at the operating-system or marketplace layer.

GoogleHIGH

Google Play, Android identity systems and age-related account controls can become an alternative distribution and policy layer.

EntrustMEDIUM

Large identity, certificate and verification vendor with enterprise distribution and capacity to bundle age assurance.

Internal platform solutionsHIGH

Large platforms can build proprietary age-gating, wallet or trusted-account systems, especially when verification is core to their ecosystem.

Your Advantages

Consumer-held credential minimizes platform custody of sensitive identity evidence.
4.2M issued credentials create an early repeat-use base.
Near-zero marginal cost for returning credential holders can improve economics at scale.
UK certification, SOC 2 Type II, ISO 27001 and EU conformity work reduce buyer trust friction.
Reported retention and expansion indicate customers see ongoing value.

Competitive Gaps

No stated evidence yet of credential reuse rate, cross-platform acceptance rate or conversion uplift.
Large incumbents have deeper fraud datasets, broader evidence-source coverage and more established enterprise distribution.
The company may be vulnerable if its credential is not interoperable with emerging EU wallet standards.
Brand awareness may lag Yoti and global identity vendors in board-level procurement.

Key Risks

• Competitors can add portable credentials or selective-disclosure features through acquisition, partnership or product development.
• Apple or Google could commoditize age assertions for mobile applications.
• A single incumbent winning a de facto regulatory standard could narrow the market.

Key Opportunities

• Own the category language of 'no document custody for relying parties.'
• Publish independently verified benchmarks showing lower abandonment, lower support burden and lower privacy exposure.

Differentiation

Score 81/100

Recommendations

TypePRODUCT

EffortMEDIUM

ImpactHIGH

How To Execute

Instrument first-pass and returning-user completion, time-to-verify, cost per successful verification, abandonment and support contacts. Produce customer-specific quarterly savings reports and contractually permit anonymized benchmark publication.

Recommendation

Make credential reuse a board-level ROI product, not an architectural claim.

Competitors Who Cannot Copy

Competitors can add a credential, but cannot immediately reproduce a multi-platform base and longitudinal repeat-use evidence.

TypePRODUCT

EffortHIGH

ImpactHIGH

How To Execute

Create a standards team, join relevant interoperability pilots, support selective disclosure and open relying-party verification APIs, and pursue wallet-issuer partnerships in two EU markets.

Recommendation

Become interoperable with EU Digital Identity Wallet and W3C verifiable credential ecosystems.

Competitors Who Cannot Copy

Incumbents can technically follow, but early conformance, partner integrations and policy influence compound over time.

TypeBUSINESS MODEL

EffortMEDIUM

ImpactHIGH

How To Execute

Offer contractual audit logs, configurable evidence retention, incident-response SLAs, jurisdictional policy mapping and an indemnity cap tied to verified deployment requirements.

Recommendation

Package a privacy and regulator-audit guarantee for high-risk platforms.

Competitors Who Cannot Copy

Large vendors can offer similar terms, but their legacy data architecture and broader product contracts can make true data-minimization guarantees harder.

TypeNICHE FOCUS

EffortMEDIUM

ImpactHIGH

How To Execute

Build dedicated product bundles, reference architectures and legal guidance for social platforms, gambling operators and regulated-commerce marketplaces.

Recommendation

Concentrate brand and sales around three verticals before expanding horizontally.

Competitors Who Cannot Copy

Focused case studies, integrations and regulatory expertise create a credibility flywheel that generalist vendors often underinvest in.

Positioning Statement

For consumer platforms facing age-assurance obligations, we are the only verification infrastructure that proves eligibility without making the platform store a consumer's identity documents, while allowing the consumer to reuse the proof everywhere it is accepted.

Current Differentiation

The privacy architecture is meaningful and commercially relevant: platforms receive an age assertion rather than a document copy. However, it is not enough to claim a network effect; management must prove credential reuse, consumer acceptance, fraud resilience and platform interoperability. The product is differentiated today, but not inherently impossible to copy.

Key Risks

• Overstating privacy differentiation without legal opinions and technical proof will invite buyer skepticism.
• Interoperability investments may be slow and standards may fragment.

Key Opportunities

• Turn the credential base into a measurable network asset.
• Set the industry expectation that platforms should not retain source identity documents.

SWOT Analysis

Score 74/100

Strengths

Strong commercial metricsHIGH
$6.4M ARR, 118% growth, 143% NRR, 91% gross margin and EBITDA positivity are unusually strong reported indicators.
Privacy-led product architectureHIGH
Signed assertions and consumer-held credentials reduce platform document custody.
Compliance credibilityHIGH
UK certification, SOC 2 Type II, ISO 27001 and EU conformity work reduce trust barriers.
Early credential networkHIGH
4.2M credential holders can lower future user friction and verification cost.

Weaknesses

Network effect is not yet independently provenHIGH
Credential count alone does not establish reuse frequency, exclusivity or willingness of platforms to accept the credential.
Enterprise concentration exposureHIGH
Two large app stores and other major platforms can exert pricing and roadmap leverage.
Operational complexityMEDIUM
Fraud, accessibility, jurisdictional rules and evidence-source reliability demand expensive specialist operations.

Opportunities

Deadline-driven platform land grabSHORT
Win design-ins before 2027 deadlines and procurement standards solidify.
Wallet interoperability leadershipMEDIUM
Position the credential as a neutral verifier across public and private wallets.
Regulated-commerce distributionMEDIUM
Use lower-ACV but faster e-commerce integrations to increase consumer credential density.

Threats

Platform-owned age assuranceHIGH
Apple, Google and large social platforms may centralize verification and capture the relationship.
Regulatory reversalsMEDIUM
US constitutional litigation and political opposition can delay or narrow mandates.
Incumbent replicationHIGH
Well-funded verification vendors can add portable credential features.

Porter's Five Forces

Score 59/100

The sector is attractive because regulation creates demand and integration can create stickiness, but profitability is constrained by strong enterprise buyers, capable rivals and dependence on upstream identity sources. The company must create a network standard rather than compete indefinitely as another verification API.

Rated 1–5 for pressure on your profits — lower is better on all five forces.How to read this

Rivalry4/5HIGH

Strong force — this one works against you.

Yoti, Persona, Incode, Veriff, K-ID and larger identity vendors compete for overlapping budgets, while buyers can run bake-offs around conversion, coverage, fraud and price.

Well-funded specialists
Low conceptual switching cost before deep integration
Rapid regulatory market formation
Feature convergence risk

New Entrants2/5LOW

Weak force — this one works in your favor.

Basic API development is accessible, but credible entry requires certifications, evidence-source partnerships, fraud operations, insurance, security maturity and enterprise references.

SOC 2 and ISO compliance
Age-assurance certification
Document and data-source coverage
Enterprise procurement credibility
Fraud and adversarial testing

Substitutes4/5HIGH

Strong force — this one works against you.

Substitutes include app-store age signals, device-level wallets, self-attestation, facial age estimation, platform-built systems and restricted access models.

Apple or Google account age signals
EU Digital Identity Wallet
Facial age estimation
Manual KYC
Self-declared age gates
Geoblocking

Buyer Power5/5VERY HIGH

Strong force — this one works against you.

Large platforms are few, sophisticated and strategically important. They can multi-source, demand bespoke terms, use volume to negotiate price and credibly consider building internally.

Customer concentration
Large account procurement power
Potential in-house alternatives
High contract values

Supplier Power3/5MODERATE

Moderate force — neither an advantage nor a blocker.

Government document sources, banks, mobile carriers, biometric vendors, cloud providers and fraud-data sources can influence coverage, cost and service quality. Multi-sourcing reduces but does not eliminate exposure.

Limited carrier and bank access in some markets
Cloud concentration
Data-source licensing
Government ID ecosystem changes

Strategic implications: Win where the company can make itself hard to replace: embed reusable credentials into customer journeys, contract for multi-year minimums, create wallet interoperability and use lower-friction repeat verification to prove economic advantage. Avoid price-only contests for one-off document checks.

BCG Growth-Share Matrix

Score 70/100

The BCG matrix compares relative market share with market growth. It is useful here for deciding whether to invest aggressively in share capture or prioritize cash generation, but it should not replace account-level strategy in a concentrated enterprise market.

Position today

Question Mark

High growth · Low share

The market is growing quickly and the company is growing faster than the category, but its relative share versus major identity vendors and total platform demand is still likely low. Its early credential network gives it a credible path to become a leader.

Projected in 3 years

Star

Secure 8-15 strategic platform and ecosystem accounts, grow credential reuse above 30% of completed checks in mature cohorts, achieve recognized interoperability with major wallet standards, and maintain 120%+ NRR without gross-margin degradation.

Share: LOWGrowth: HIGH

Strategic move: Invest selectively to turn strategic large-platform accounts and interoperability partnerships into a leadership position. Protect profitability by rejecting low-value custom deals and measuring capital efficiency by credential reuse and contracted platform volume, not only ARR.

The company has meaningful revenue and customer traction, but reliable category-wide market-share data is unavailable; the classification is therefore directional rather than a precise market-share calculation.

Blue Ocean Strategy

Score 77/100

The company can shift competition away from document-check accuracy and per-check price toward a new value curve: reusable, privacy-preserving proof with lower reliance-party data custody. This is viable only if credential acceptance becomes broad enough to matter.

Eliminate

Which factors to remove entirely

Platform retention of raw identity documents for age-only decisions
Repeated consumer document submission across participating services

Raise

Which factors to lift well above standard

Selective disclosure controls
Auditability by jurisdiction
Consumer transparency and consent
Cross-platform completion rates

Reduce

Which factors to cut below standard

Manual review dependency
Time to complete a returning-user verification
Relying-party privacy and breach scope

Create

Which new factors the industry never offered

Credential reuse-rate dashboard
Relying-party trust registry
Privacy-preserving age-proof portability standard
Consumer credential recovery and control center

Strategy Canvas

Your offering Industry norm

The company should score substantially above conventional vendors on portability, data minimization and returning-user experience, while maintaining baseline parity on assurance, fraud defense and integration quality. It should not underinvest in fraud or certification merely to appear simpler.

The blue ocean: Build the neutral age-credential network that lets platforms obtain only the fact they need—such as 'over 18'—rather than becoming document custodians.

Moat Analysis

Score 69/100

The company has several moderate moats that can become strong together, but none is independently impregnable today. The central task is to convert credentials from a feature into a trusted, widely accepted network.

Network EffectsMODERATE

More credential holders improve returning-user speed and cost for relying parties; more relying parties make credential ownership more useful. The effect is limited until reuse occurs frequently across independent platforms.

How to build: Publish reuse metrics, sign interoperability agreements, prioritize high-overlap consumer categories and incentivize relying-party acceptance.

Switching CostsMODERATE

SDK integration, compliance documentation, audit history and consumer credential flows create switching friction, but buyers can multi-source verification vendors.

How to build: Embed policy engines, reporting, operational workflows and multi-year volume commitments.

DataMODERATE

Credential lifecycle and fraud signals can improve operations, but privacy design intentionally limits centralized data accumulation and data use must remain lawful.

How to build: Use privacy-preserving aggregated fraud intelligence and consented telemetry rather than raw identity hoarding.

DistributionMODERATE

Enterprise references and two app stores are valuable channels, but those same platforms may become gatekeepers.

How to build: Diversify distribution through wallets, commerce platforms, carriers, gaming platforms and legal-compliance advisors.

Economies of ScaleMODERATE

Reusable credential assertions can have very low marginal cost and shared compliance infrastructure scales efficiently.

How to build: Increase credential reuse, negotiate volume data-source contracts and automate exception handling.

BrandWEAK

Certification and app-store customers create credibility, but category-level public and procurement awareness likely trails Yoti and major identity vendors.

How to build: Own privacy-preserving age proof through third-party validation, regulator engagement and public thought leadership.

CommunityWEAK

There is no meaningful community moat yet among consumers, developers or standards bodies.

How to build: Create developer and wallet-partner programs, transparent privacy education and an open relying-party registry.

Strongest path: Build an interoperable credential-acceptance network across high-overlap consumer platforms, then combine it with audit workflows and volume economics so that leaving means worse consumer conversion, higher verification costs and less defensible privacy posture.

7 Powers (Helmer)

Score 67/100

Hamilton Helmer's Seven Powers identifies durable sources of persistent differential returns: scale economies, network economies, counter-positioning, switching costs, branding, cornered resources and process power. For this company, network adoption and switching costs matter far more than simply having a better verification API.

Scale EconomiesAttainable

Shared compliance, cloud, fraud and credential infrastructure can serve increasing volume at low marginal cost, especially for returning users.

Path: Drive credential reuse above a critical threshold and secure volume-based evidence-source pricing.

Switching CostsAttainable

Integrated SDKs, audit trails, credential holder experience and compliance configuration make replacement inconvenient.

Path: Embed reporting, policy management, recovery and exception workflows into daily operations.

Network EconomiesPossible

The two-sided loop is credible but depends on multi-platform acceptance and consumer overlap; 4.2M credentials are an encouraging start, not proof of escape velocity.

Path: Target platforms with shared demographics, measure reuse by cohort and create contractual/technical interoperability.

Counter-PositioningPossible

A privacy-first, no-document-custody architecture may challenge vendors whose economics and workflows depend on platform-centric document verification.

Path: Make data minimization contractual and central to procurement, not merely a marketing feature.

BrandingPossible

Trust and privacy brands can matter greatly, but enterprise procurement still prioritizes proof, certification and coverage.

Path: Obtain independent privacy and assurance validation and build regulator-recognized thought leadership.

Process PowerPossible

Cross-border fraud operations, policy mapping and privacy-preserving credential issuance can become difficult-to-copy routines over years.

Path: Codify launch playbooks, decisioning feedback loops and regulatory implementation expertise.

Cornered ResourceOut of reach

The company does not appear to own exclusive government, carrier or device-level data sources, and its credential base is not exclusive.

Path: Seek preferred long-term source partnerships, but do not build strategy on exclusivity.

Recommended power: Allocate Series B capital first to network economies: secure acceptance by strategically overlapping platforms and make reuse visible, valuable and technically effortless.

Business Model & Financials

Jobs To Be Done

Score 82/100

Customers do not primarily hire an API; they hire a defensible way to let eligible adults proceed while protecting minors, conversion and privacy. The consumer is simultaneously hiring a way to prove eligibility without repeatedly surrendering identity documents.

The core job customers hire you for
When a user accesses an age-restricted service, help the platform confirm eligibility quickly and defensibly without storing the user's identity documents or making the user repeat the process everywhere.

FunctionalThe practical task to get done

Verify that a user meets an age threshold before granting access or completing a sale.
Today: Self-attestation, document checks, KYC vendors or age estimation.
Gap: Many options either fail regulatory scrutiny, cause friction or require document retention.
Demonstrate compliance to regulators and boards.
Today: Policy documentation and vendor reports.
Gap: Platforms need jurisdiction-specific, auditable proof of how decisions were made.
Allow returning consumers to verify quickly.
Today: Repeated document upload or account-based age data.
Gap: Users repeatedly face friction and platforms duplicate sensitive-data risk.

EmotionalHow they want to feel

Help platform leaders feel they are protecting children without becoming a surveillance company.
Today: Privacy statements and conventional KYC.
Gap: Document collection creates discomfort and reputational exposure.
Help consumers feel in control of personal information.
Today: Trusting each individual platform.
Gap: Consumers lack a portable, understandable proof mechanism.

SocialHow they want to be seen

Enable a platform to be seen as both safe for minors and respectful of adult users.
Today: Public safety commitments.
Gap: Poor verification experiences can make safety measures appear punitive or invasive.
Enable compliance leaders to show prudent governance to boards and regulators.
Today: Vendor selection processes.
Gap: They need a credible narrative beyond 'we added an age gate.'

The underserved opening

Own the cross-platform reuse job: make age proof a consumer-controlled utility rather than a repeated compliance interruption.

Key Risks

• Consumers may not understand or trust the credential concept.
• Some use cases require more than age proof, limiting replacement of KYC.

Key Opportunities

• Design consumer messaging around control and one-time verification.
• Upsell auditability and policy management to compliance teams.

Lean Canvas

Score 82/100

Problem

Platforms must comply with age-assurance obligations without exposing minors or risking severe penalties.
Document-based verification causes conversion loss and makes platforms custodians of sensitive identity data.
Consumers must repeatedly prove age across services despite already being verified elsewhere.

Solution

SDK/API for age and identity proofing through multiple trusted evidence methods.
Consumer-held reusable cryptographic credential.
Jurisdictional policy, audit and compliance reporting layer.

Key Metrics

Annual recurring revenue (contracted recurring revenue each year)
Net revenue retention (how much existing customers spend after renewals and expansion)
Credential reuse rate (share of completed checks using an existing credential)
Verification completion rate (share of users who finish the flow)
False accept rate (share of ineligible or fraudulent users incorrectly approved)
Gross margin (revenue remaining after direct verification costs)
Time to production launch (days from contract to live customer integration)

Unique Value Proposition

Compliant age assurance without document custody: users prove once, platforms receive only a signed eligibility answer.

Unfair Advantage

The combination of certified trust infrastructure, 4.2M existing credentials, enterprise integrations and a privacy architecture that makes reuse economically compelling.

Channels

Named-account enterprise sales
Trust-and-safety, privacy and regulatory conferences
App-store and wallet partnerships
E-commerce and gambling platform integrations
Law-firm and compliance-consultancy referrals

Customer Segments

Large social and user-generated-content platforms
Online gambling and betting operators
Alcohol, vape and regulated-goods e-commerce
App stores and developer ecosystems

Early adopters: UK and EU consumer platforms with a near-term enforcement deadline, more than one million monthly users, existing privacy counsel involvement and dissatisfaction with storing identity documents.

Cost Structure

Identity-source and carrier feesHIGHCloud, cryptographic infrastructure and observabilityHIGHFraud operations and security engineeringHIGHEnterprise sales and solutions engineeringHIGHRegulatory, legal and certification workHIGH

Revenue Streams

Enterprise platform subscriptionAnnual minimum platform fee for SDK, policy engine, support and audit features.45-55%

Usage-based verification feesTiered per successful verification with lower rates for reusable credential assertions.35-45%

Compliance and premium supportAnnual fees for bespoke policy configuration, reporting, SLAs and implementation.10-15%

Business Model Canvas

Score 84/100

Key Partners

Government and document-verification sources
Banks and open-banking identity partners
Mobile carriers
Cloud and cryptographic key-management providers
App stores, wallet providers and commerce platforms
Privacy, security and regulatory advisors

Key Activities

Evidence verification and age decisioning
Credential issuance, revocation and verification
Fraud prevention and adversarial testing
Enterprise integrations and support
Regulatory mapping, certification and audit reporting

Key Resources

Credential-holder network
Verification and cryptographic infrastructure
Compliance certifications
Fraud operations and evidence-source relationships
Enterprise customer references and integrations

Value Propositions

Age assurance without relying-party document storage
Fast returning-user verification
Auditable compliance across jurisdictions
Lower marginal cost as credential reuse grows

Customer Relationships

Enterprise account management
Solutions engineering and implementation support
Quarterly compliance and ROI reviews
Developer documentation and sandbox access

Channels

Direct enterprise sales
Strategic ecosystem partnerships
Compliance advisors and law firms
Platform marketplaces and integrations

Customer Segments

Large consumer platforms
Online gambling operators
Regulated e-commerce
App stores and developer ecosystems

Cost Structure

Evidence-source fees
Cloud and security infrastructure
Engineering and fraud operations
Sales, solutions engineering and customer success
Legal, insurance, certification and regulatory affairs

Revenue Streams

Annual SaaS platform fees
Verification transaction fees
Premium SLAs and compliance reporting
Implementation and bespoke integration fees where justified

Certified infrastructure and evidence-source partnerships allow the company to issue trusted credentials. Enterprise integrations create relying-party acceptance; every accepted credential reduces friction and direct cost for later checks, strengthening retention and expansion. The model works best when the company standardizes deployments and resists excessive custom work.

Alternative Business Models

Score 84/100

Alternatives

Cons

Commoditizes the product
Creates volatile revenue
Fails to monetize compliance workflow and network value

Pros

Simple procurement
Aligns directly to volume
Easy for smaller merchants to adopt

Model

Pure per-verification API

VerdictNOT RECOMMENDED

Description

Charge only for each age or identity check, with no platform subscription.

Revenue Impact

Could accelerate small-customer adoption but likely lowers blended gross profit and strategic positioning.

Switching DifficultyMEDIUM

Cons

High consumer-acquisition cost
Weak willingness to pay for a compliance utility
Risks distracting from enterprise adoption

Pros

Direct consumer relationship
Potential recurring B2C revenue
Strengthens user control narrative

Model

Consumer subscription identity wallet

VerdictNOT RECOMMENDED

Description

Consumers pay directly for a premium reusable credential and identity-management service.

Revenue Impact

Likely negative near-term economics; could create optionality only after broad acceptance.

Switching DifficultyHIGH

Cons

Partner dependency
Lower control over end-customer relationship
Potential margin sharing

Pros

Scalable distribution
Faster credential density
Reduces direct small-merchant sales cost

Model

White-label compliance platform for marketplaces and commerce platforms

VerdictSTRONG ALTERNATIVE

Description

Embed the solution into Shopify-like, gaming-platform or payment-provider ecosystems and charge platform-level fees plus downstream usage.

Revenue Impact

Could add high-volume distribution and improve network effects if partner terms preserve portability.

Switching DifficultyMEDIUM

Cons

Product sprawl
Competes more directly with K-ID and governance platforms
May reduce focus on credential network

Pros

Higher ACV
Greater switching costs
Broader trust-and-safety relevance

Model

Compliance operating system

VerdictWORTH TESTING

Description

Expand into policy orchestration, parental consent, risk assessment and reporting beyond age proof.

Revenue Impact

Can increase enterprise expansion revenue but should be modular and customer-led.

Switching DifficultyMEDIUM

Current Model

Enterprise SaaS plus usage-based verification fees, centered on reusable consumer-held credentials.

Recommendation

Retain the hybrid subscription-plus-usage model. Add selective white-label distribution through strategic commerce, gaming and platform partners, but preserve direct contractual rights to credential portability and anonymized network measurement.

Key Risks

• A white-label partner can capture the customer relationship.
• Overexpansion into broad compliance software dilutes the core credential advantage.

Key Opportunities

• Partner distribution can rapidly increase credential reuse.
• Subscription fees protect revenue from volume volatility.

Ansoff Matrix

Score 76/100

The lowest-risk growth path is deeper penetration of existing high-value customer segments before broad geographic or product diversification.

New MarketsExisting Markets

Market Development

MEDIUM risk12-30 months

Enter additional regulated commerce and gaming channels through ecosystem partners.

Integrate with e-commerce and gaming platforms
Launch carrier and bank coverage in priority countries
Recruit regional compliance channel partners

Diversification

HIGH risk24-48 months

Extend reusable assertions into adjacent eligibility claims such as residency, parental status or professional entitlement.

Pilot one adjacent claim with existing customers
Use selective disclosure architecture
Avoid regulated financial KYC expansion without a clear partner

Market Penetration

Recommended

MEDIUM risk0-18 months

Win more large UK, EU and US consumer platforms and expand existing accounts across brands, regions and use cases.

Named-account plans for top 50 platforms
Executive compliance workshops
Multi-year volume commitments
Customer ROI reports based on reuse and conversion

Product Development

MEDIUM risk6-24 months

Add policy orchestration, wallet interoperability, audit tooling and higher-assurance credential options.

W3C and EU wallet support
Regulator-ready evidence reports
Credential recovery and revocation tools
Fraud-risk scoring for relying parties

Existing ProductsNew Products

Why this path: The company has proof of product-market fit, regulatory urgency and existing enterprise traction. Winning strategic platforms before deadlines is more valuable and less distracting than entering unrelated identity categories.

Value Chain

Score 68/100

Value is created by converting trusted evidence into a low-friction, auditable age assertion, then retaining value through reuse. The fragile links are upstream evidence availability, fraud defense and downstream platform adoption.

Support Activities

Security and privacy governance

SOC 2 Type II and ISO 27001 are completed.↗ Add privacy engineering attestations, red-team results and breach-response simulations.

HIGH

Fraud research and operations

Required but operational details are undisclosed.↗ Build a dedicated adversarial-fraud team and shared intelligence network.

HIGH

Regulatory affairs

UK certification and two EU conformity assessments are reported.↗ Create a centralized policy engine and direct regulator-engagement function.

HIGH

Enterprise sales and partnerships

61 enterprise customers and two app stores demonstrate credibility.↗ Use named-account teams and wallet, carrier and commerce-platform partnerships.

HIGH

Primary Activities

Evidence-source orchestration

HIGH

Government ID, bank credential and mobile-carrier paths are stated as available.

↗ Increase country-specific pass rates and route users to the lowest-cost successful method.

Identity and age decisioning

HIGH

Core cryptographic assertion product with no document disclosure to relying platforms.

↗ Publish assurance-level policies and improve explainability for audits.

Credential issuance and reuse

HIGH

4.2M consumers hold credentials.

↗ Increase cross-platform acceptance and measure active credential density by geography.

Platform integration and support

HIGH

SDK/API delivery to 61 enterprise customers.

↗ Create self-serve sandbox, vertical connectors and implementation templates.

Compliance reporting

MEDIUM

Certifications provide a base of trust.

↗ Provide regulator-ready audit packets and jurisdictional evidence reports.

Margin

Evidence-source orchestration

HIGH

Government ID, bank credential and mobile-carrier paths are stated as available.

↗ Increase country-specific pass rates and route users to the lowest-cost successful method.

Identity and age decisioning

HIGH

Core cryptographic assertion product with no document disclosure to relying platforms.

↗ Publish assurance-level policies and improve explainability for audits.

Credential issuance and reuse

HIGH

4.2M consumers hold credentials.

↗ Increase cross-platform acceptance and measure active credential density by geography.

Platform integration and support

HIGH

SDK/API delivery to 61 enterprise customers.

↗ Create self-serve sandbox, vertical connectors and implementation templates.

Compliance reporting

MEDIUM

Certifications provide a base of trust.

↗ Provide regulator-ready audit packets and jurisdictional evidence reports.

Margin

Financial Projections

Score 82/100

Annual enterprise platform subscription, minimum usage commitments, per-verification charges and premium fees for compliance reporting, implementation and service levels.

ARPU

Approximately $105,000 current ARR per enterprise customer, though large platforms likely have materially higher ACVs and smaller retailers materially lower ACVs.

CAC

Approximately $55,000-$80,000 blended fully loaded CAC, inferred from nine-month payback and reported gross margin; validate against actual finance data.

LTV

$1.0M-$1.8M for a typical enterprise account using a 5-7 year retention horizon and expansion; highly sensitive to customer concentration and segment.

LTV : CAC

Approximately 15x-25x on reported operating metrics; this is unusually high and should be audited for fully loaded sales, support and implementation costs.

Payback

9 months reported

Gross margin

91% reported

Projected Revenue, Costs & EBITDA

Revenue Costs EBITDA

Year 202678-86 enterprise customers customers

Revenue: $11.0M-$12.0M
Costs: $10.2M-$11.2M
EBITDA: $0.8M-$1.2M

Close 3-5 strategic platform contracts
Measure credential reuse by customer cohort
Launch wallet-interoperability roadmap

Year 2027100-120 enterprise customers customers

Revenue: $18.0M-$22.0M
Costs: $16.5M-$20.5M
EBITDA: $1.5M-$2.5M

Win pre-deadline deployments
Achieve 15-25% credential reuse in mature participating cohorts
Expand EU country coverage and audit tooling

Year 2028130-165 enterprise customers customers

Revenue: $29.0M-$36.0M
Costs: $25.5M-$32.5M
EBITDA: $3.5M-$5.5M

Establish 8-15 strategic ecosystem accounts
Credential network reaches meaningful cross-platform utility
Maintain 88%+ gross margin at scale

Funding

Bootstrappable

Named-account enterprise sales and solutions engineering
Fraud, security and credential-revocation resilience
EU wallet and verifiable-credential interoperability
Regulatory affairs and additional country conformity work
Implementation capacity for large platform launches

Key Assumptions

Starting ARR is $6.4M with 61 enterprise customers and 118% reported year-over-year growth.
Growth moderates as the revenue base increases but remains supported by deadline-driven enterprise wins.
Gross margin remains 88-91% if reuse offsets evidence-source costs and custom implementation is controlled.
Annual logo churn stays below 5%, while NRR normalizes from 143% toward 125-135%.
Series B capital, if raised, is deployed primarily to named-account sales, fraud/security, wallet interoperability and implementation capacity.
Projections exclude a major regulatory reversal, material breach or loss of a top customer.

These are AI-generated estimates based on industry benchmarks and should be validated with professional financial advisors.

VC Assessment

Score 78/100

Can this raise venture capital?

Venture-backable

This has the scale trajectory outside investors look for.

The business has the core ingredients of a strong Series B candidate: rapid ARR growth, high gross margin, excellent reported net retention, low churn, proven enterprise demand, regulatory tailwinds and a plausible network-effect story. It is not an automatic premium multiple story because the market is crowded, buyer concentration is high and platform-level disintermediation could cap independent scale.

Odds of raising, by stage

AngelLOW

SeedLOW

Series AMEDIUM

What investors will push back on

• What percentage of checks and revenue comes from reusable credentials rather than first-time verification?
• What is ARR concentration among the top five and top ten customers?
• What are gross margins after fully loaded evidence-source, fraud-review and support costs at scale?
• Can Apple, Google or a major social platform internalize the product or dictate the credential standard?
• Which regulations are enforceable, funded and likely to create actual spend by 2027?
• How does the company prevent credential theft, replay attacks, deepfake fraud and false approvals?
• What makes the consumer credential portable if a relying party or wallet ecosystem does not accept it?

How this could end

Scenario	Odds	Value	When
Strategic acquisition by identity, security, payments or trust-infrastructure provider	HIGH	$250M-$1.0B depending on ARR scale, growth, credential network strength and customer concentration	3-6 years
Independent late-stage scale-up and eventual public offering	LOW	$1B+ requires $100M+ ARR, broad international distribution and clear category leadership	6-10 years
Profitable private company with selective secondary liquidity	MEDIUM	$150M-$500M enterprise value depending on growth and margin durability	3-7 years

Comparable companies

Persona

Venture-backed private identity-verification platform.

Why it matters: Shows investor appetite for modern identity infrastructure and enterprise workflow products.

Incode

Venture-backed private identity and fraud company with substantial growth financing.

Why it matters: Demonstrates the scale of capital competing in biometric identity and fraud prevention.

Yoti

Private digital identity and age-assurance provider with long-standing UK market presence.

Why it matters: Validates age assurance as an enduring category while highlighting incumbent credibility.

Onfido

Acquired by Entrust in 2024.

Why it matters: Illustrates strategic M&A appetite for identity verification and the industry's consolidation dynamics.

Bootstrap or raise: The company does not need venture capital to survive, which is a strength. Raise venture capital only to accelerate a time-bounded strategic land grab with defined account, interoperability and credential-reuse milestones; otherwise, preserve leverage through profitable growth and selective strategic financing.

Key Risks

• A high valuation based on regulatory hype can create difficult future financing conditions.
• Investor expectations may push geographic expansion faster than compliance and fraud operations can support.

Key Opportunities

• Profitability improves negotiating leverage and allows a selective investor process.
• A strategic investor can add distribution if commercial terms do not compromise neutrality.

Risks

Risk Analysis

Score 56/100

Overall risk: HIGH

The company has strong commercial indicators but operates in a high-consequence market. The largest risks are strategic rather than basic execution: platform disintermediation, unproven network-effect durability, regulatory fragmentation and a trust-destroying security or fraud incident.

Likelihood →

2346

LowMediumHigh

Impact →

1App-store or operating-system disintermediationCOMPETITIVE
Likelihood: HIGHImpact: HIGH
Apple, Google or major platforms could provide native age signals, dictate approved providers or internalize credential issuance.
Mitigations
- Secure contractual interoperability and non-exclusivity with ecosystem partners.
- Diversify into web, commerce, gambling and direct platform channels.
- Position as a neutral cross-ecosystem verifier rather than an app-only solution.
2Reusable credential network fails to reach critical massMARKET
Likelihood: MEDIUMImpact: HIGH
Credential holders may not encounter enough participating services, preventing meaningful reuse and leaving the product comparable to ordinary verification.
Mitigations
- Track reuse by cohort and geography weekly.
- Focus on high-overlap vertical clusters.
- Use partner distribution and incentives for credential acceptance.
3Regulatory fragmentation or reversalREGULATORY
Likelihood: MEDIUMImpact: HIGH
US litigation, divergent EU member-state expectations or changes in UK guidance can delay deployments or require costly redesign.
Mitigations
- Maintain a configurable policy engine.
- Use jurisdiction-specific legal opinions.
- Avoid revenue plans that assume every proposed law is enforced on schedule.
4Fraud, deepfake or credential-account takeover incidentTECHNICAL
Likelihood: MEDIUMImpact: HIGH
A false approval involving a minor or widespread credential compromise could damage regulator and customer trust.
Mitigations
- Continuous red-team testing and liveness controls.
- Credential revocation and recovery procedures.
- Incident response drills, cyber insurance and transparent audit logs.
5Large customer concentration and price pressureFINANCIAL
Likelihood: HIGHImpact: HIGH
A few platforms may represent a disproportionate share of ARR and negotiate aggressive pricing, liabilities or bespoke product work.
Mitigations
- Set account concentration limits.
- Use minimum commitments and paid implementation.
- Build mid-market partner channels to diversify revenue.
6Privacy claims exceed legal realityREPUTATIONAL
Likelihood: MEDIUMImpact: HIGH
Even without sharing documents with platforms, the company itself processes highly sensitive information and may face privacy, retention and lawful-basis scrutiny.
Mitigations
- Commission independent privacy assessments.
- Use precise legal language in sales materials.
- Minimize retention and provide clear consumer controls.

Failure Analysis

Pre-mortem: imagine the business failed in two years. It likely did not fail because there was no regulatory demand; it failed because the company spent heavily pursuing large accounts while platform ecosystems, incumbents or fragmented regulation prevented reusable credentials from becoming a durable standard.

Idea Killers

A major app-store or operating-system policy prevents independent reusable credentials from serving the primary mobile-platform market.
Independent data shows that reusable credentials do not improve completion, cost or retention versus conventional verification.
A material security breach or systemic underage false-accept event destroys regulatory and customer trust.
More than 40% of ARR becomes dependent on one customer without enforceable long-term protections.

Top Failure Risks

Risk

The company wins pilots but not durable, scaled platform deployments.

Mitigation

Require executive sponsor, production timeline, compliance use case and contracted volume criteria before funding bespoke pilots.

ProbabilityMEDIUM

Early Warning Sign

Pipeline contains many proof-of-concepts but fewer than 30% convert to multi-year production contracts.

Risk

App stores centralize age assurance and turn the company into a low-margin subcontractor.

Mitigation

Negotiate portability, non-exclusivity and direct credential-verification rights; diversify web and commerce distribution.

ProbabilityMEDIUM

Early Warning Sign

Platform partners demand exclusivity, control credential format or prohibit direct relying-party relationships.

Risk

Network economics never materialize.

Mitigation

Concentrate on overlapping user segments and publish a target threshold for reuse before scaling sales spend.

ProbabilityMEDIUM

Early Warning Sign

Returning credentials remain below 10% of checks after adding multiple major customers.

Risk

A fraud or privacy event undermines trust.

Mitigation

Fund security, fraud red teaming, credential revocation and transparent incident governance before rapid expansion.

ProbabilityLOW

Early Warning Sign

Increasing manual-review rates, rising account recovery fraud, unresolved penetration-test findings or customer complaints.

Risk

Regulation produces less spend than forecast.

Mitigation

Maintain profitability, diversify into already-regulated gambling and commerce, and use phased hiring.

ProbabilityMEDIUM

Early Warning Sign

Enforcement dates slip, regulators endorse self-declaration or buyers defer procurement pending litigation.

Failure Risk Score

Comparable Failures

Lesson

Identity verification can look software-like while carrying costly operations, fraud and growth-investment requirements; maintain disciplined unit economics.

Company

Jumio

What Happened

The identity-verification company entered bankruptcy protection in 2015 after rapid expansion, high operating costs and financing pressure, before later continuing under new ownership.

Lesson

A strong product does not guarantee independent category leadership; strategic buyers and platform giants can reshape the competitive landscape.

Company

Onfido

What Happened

Onfido became a significant identity-verification company but was acquired by Entrust in 2024, illustrating how scale and distribution pressure can drive consolidation in the category.

Key Risks

• Growth spending ahead of validated network economics could be destructive.
• Consolidation may limit independent exit options or force strategic dependence.

Key Opportunities

• Early-warning metrics can make a capital raise milestone-driven rather than narrative-driven.
• Profitability provides a buffer against regulatory timing risk.

Execution

How To Start

Score 72/100

The company has already achieved product-market fit and profitability; the decision is how to fund and sequence the next growth phase. The best path is not a generic fundraising sprint but a controlled strategic-account campaign that creates financing leverage.

Stay capital-efficient and self-fund targeted growth

Upfront$2M-$4M of internally generated cash and existing balance-sheet capacity over 18-24 monthsFirst revenueImmediate, from existing customer expansion and pipeline

1. Restrict hiring to strategic sales, fraud/security and interoperability roles. 2. Focus on top accounts with the highest credential-overlap potential. 3. Reinvest EBITDA into implementation and partner channels. 4. Raise later only after proving reuse and signed large-platform commitments.

Scenario	Year 1	Year 3
ConservativeOne major platform win, moderate regulatory delays and continued profitability.	$9M	$22M
RealisticThree strategic wins, stable retention and expanding credential reuse.	$11M	$30M
OptimisticMultiple platform deployments and strong partner-led credential density.	$13M	$42M

What it could be worth: Likely preserves ownership and creates a credible strategic-sale or later growth-equity path, though it risks ceding deadline-window share.

Best for: Founders prioritizing control and willing to accept slower large-account coverage.

Milestone-based Series B land grab

Recommended

Upfront$25M-$35M Series B plus continued operating cash flowFirst revenue6-18 months for major platform contracts; immediate for existing expansion

1. Build a named list of 30 strategic accounts and quantified deployment plans. 2. Secure two anchor commitments, paid pilots or advanced procurement milestones. 3. Raise $25M-$35M with a 24-30 month operating plan. 4. Add only the sales, implementation, fraud and standards capacity needed to win those accounts.

Scenario	Year 1	Year 3
ConservativeCapital is raised but only some strategic accounts convert; investments raise costs before revenue.	$11M	$28M
RealisticFour to six large wins, continued 120%+ NRR and meaningful credential reuse.	$12M	$36M
OptimisticThe company becomes a preferred cross-platform standard and wins major ecosystem distribution.	$15M	$55M

What it could be worth: Higher upside and stronger chance of category leadership, but materially greater dilution and execution risk.

Best for: A management team with verified large-account pipeline and the discipline to tie hiring to signed milestones.

Recommended path: Milestone-based Series B land grab, but only after validating strategic account demand and credential reuse. If those milestones are not met within 90 days, remain capital-efficient and revisit financing from a stronger position.

Start here — your first three steps

Within 14 days, create a board-approved top-30 account list showing buyer, deadline, estimated ACV, current provider, integration complexity and probability-weighted close date.
Within 30 days, produce a cohort analysis showing credential reuse, completion time, cost and conversion for first-time versus returning users by customer and geography.
Within 45 days, obtain at least two written anchor signals—paid pilot, procurement shortlist, LOI or expansion commitment—from target strategic platforms before launching the Series B process.

Key Risks

• Raising before account-level proof can create pressure to deploy capital indiscriminately.
• Self-funding can miss a once-in-cycle procurement window.

Key Opportunities

• Existing profitability gives the company a genuine choice rather than forced financing.
• Anchor commitments can materially improve valuation and investor quality.

Go-To-Market

Score 80/100

Use an account-based, regulation-led enterprise strategy for strategic platforms, supported by partner-led distribution for fragmented regulated commerce. The message must combine compliance, conversion and privacy liability reduction; selling only an API understates the value.

Prove the network and secure anchors0-3 months

Goals

Validate top-30 strategic account pipeline
Quantify reusable-credential ROI
Secure two anchor commitments before fundraising

Channels

Named-account outreach
Existing customer executive introductions
Privacy and trust-and-safety events
Regulatory counsel referrals

Tactics

Run executive workshops tied to jurisdiction deadlines
Offer paid technical and policy assessments
Create customer-specific data-custody risk assessments
Publish an independently reviewed privacy architecture paper

Budget

$0.8M-$1.2M incremental spend

Win deadline-driven platforms3-12 months

Goals

Close 3-5 strategic platforms
Increase enterprise pipeline coverage to 4x annual bookings target
Build repeatable implementation playbooks

Channels

Direct enterprise sales
App-store and wallet relationships
Legal and compliance partners
Gambling and commerce platform partnerships

Tactics

Deploy vertical sales pods
Use outcome-based pricing with minimums
Offer regulator-ready launch packages
Create partner referral and implementation programs

Budget

$5M-$8M incremental spend if Series B is raised

Scale credential acceptance and partner distribution12-30 months

Goals

Make reuse a meaningful share of completed checks
Expand EU coverage
Diversify revenue away from top customers

Channels

Embedded platform integrations
Wallet and carrier partnerships
Developer ecosystem
Strategic channel partners

Tactics

Launch relying-party trust registry
Offer credential acceptance incentives
Add self-serve integrations for smaller merchants
Package compliance reporting for expansions

Budget

$8M-$12M incremental spend, released only against contract and reuse milestones

Pricing

Annual platform subscription plus committed verification volume, with materially lower rates for reusable credential assertions and premium fees for compliance, support and bespoke implementation.. This captures compliance-platform value, protects downside through minimums and gives customers a direct economic reason to promote credential reuse.

Regulated Commerce

$20,000-$60,000

annual platform fee plus $0.25-$1.00 per first-time verification and lower returning-credential rates

Alcohol, vape and regulated-goods e-commerce

Checkout SDK
Basic jurisdiction rules
Standard reporting
Email support

Enterprise Assurance

$100,000-$350,000

annual minimum plus volume commitment

Large social, gaming and gambling platforms

Multi-country SDK
Policy engine
Audit logs
Dedicated success manager
Premium SLA

Strategic Ecosystem

$500,000-$2M+

annual minimum plus negotiated volume and implementation fees

App stores, major marketplaces and platform ecosystems

Custom integration
Multi-tenant support
Executive governance
Advanced reporting
Joint roadmap and incident procedures

How you'll get customers

Channel	Priority	Cost per customer	Scales?
Named-account enterprise sales	PRIMARY	$75,000-$250,000 per strategic account	MEDIUM
Existing-customer expansion and referrals	PRIMARY	$10,000-$35,000 per expansion	MEDIUM
Platform and wallet partnerships	PRIMARY	$50,000-$150,000 per activated partner excluding revenue share	HIGH
Legal, privacy and compliance advisors	SECONDARY	$25,000-$75,000 per qualified enterprise win	MEDIUM
Developer-led self-service	EXPERIMENTAL	$500-$3,000 per small account	HIGH

Key Risks

• Strategic accounts can consume disproportionate sales and implementation resources.
• Discounting to win reference logos can undermine pricing power.

Key Opportunities

• Deadline-based selling creates urgency rarely available in ordinary SaaS.
• Partner distribution can lower CAC and increase credential density.

Validation Roadmap

Score 71/100

The core business is validated; the remaining critical uncertainties concern the durability of the credential network and the return on a growth round. Validation should be account- and cohort-specific, not broad market research.

Recommended Sequence

Reusable credentials create materially better economics and conversion than one-time verification.
Large platforms will select an independent provider rather than build or rely on app-store signals.
The credential network can become self-reinforcing in priority geographies.
Regulatory demand converts to budgeted spend before 2027.
EU wallet interoperability will strengthen rather than commoditize the company.

Assumptions To Validate

Cost

$50,000-$100,000 including analytics and independent methodology review

Duration

4-6 weeks

Assumption

Reusable credentials create materially better economics and conversion than one-time verification.

Experiment

Analyze matched cohorts across at least five customers: first-time versus returning-user completion, verification time, direct cost and support rate.

CriticalityDEAL BREAKER

Success Criteria

Returning users complete at least 15 percentage points faster or with at least 10 percentage points higher completion, and direct cost per completed check is at least 50% lower.

Cost

$150,000-$300,000 in executive sales and solutions-engineering time

Duration

8-12 weeks

Assumption

Large platforms will select an independent provider rather than build or rely on app-store signals.

Experiment

Conduct structured procurement discovery with the top 30 named accounts and obtain written commercial milestones from at least five.

CriticalityDEAL BREAKER

Success Criteria

At least two paid pilots, LOIs or active procurement processes with combined annual contract value above $2M.

Cost

$250,000-$500,000

Duration

3-6 months

Assumption

The credential network can become self-reinforcing in priority geographies.

Experiment

Map consumer overlap across current and target customers, then launch a coordinated acceptance pilot in one UK or EU vertical cluster.

CriticalityIMPORTANT

Success Criteria

Credential reuse exceeds 20% of completed checks among participating customers after six months.

Cost

$75,000-$150,000

Duration

8 weeks

Assumption

Regulatory demand converts to budgeted spend before 2027.

Experiment

Track regulatory deadlines, buyer budget ownership and legal sign-off across the top-30 account pipeline.

CriticalityIMPORTANT

Success Criteria

At least 70% of priority accounts identify a funded compliance owner and implementation deadline.

Cost

$200,000-$400,000

Duration

4-8 months

Assumption

EU wallet interoperability will strengthen rather than commoditize the company.

Experiment

Join two interoperability pilots and interview wallet issuers, relying parties and regulators.

CriticalityNICE TO KNOW

Success Criteria

At least one wallet partner agrees to commercial or technical integration with the company as a relying-party verification layer.

Total Validation Budget

$725,000-$1.45M, largely funded through existing sales, product and partnership activity rather than standalone research.

Key Risks

• Management may mistake activity metrics for proof of durable network value.
• Pilot results may not generalize across verticals or geographies.

Key Opportunities

• Validated reuse data can materially strengthen fundraising and pricing.
• Account-level validation prevents overhiring against speculative demand.

Action Plan

Do these now

Create a top-30 strategic-account war room with owner, compliance trigger, incumbent, expected ACV, technical blockers and next executive action for every account.

The Series B decision should be driven by a finite, high-value capture plan rather than a broad belief in market growth.

14 daysMEDIUM effortHIGH impact

Produce an independently reviewed credential-reuse and conversion benchmark report using current customer cohorts.

This is the evidence needed to prove the network effect, improve enterprise selling and defend valuation.

45 daysMEDIUM effortHIGH impact

Commission a board-level platform-disintermediation strategy covering Apple, Google, EU wallet providers and large social platforms.

The company must know where it can be neutral infrastructure, where it risks subcontractor status and what terms to demand.

60 daysHIGH effortHIGH impact

Set formal customer-concentration and bespoke-work guardrails before scaling sales.

Large logos can create hidden margin, roadmap and dependency risk.

30 daysLOW effortHIGH impact

Milestones

30 days
- Top-30 account plans completed and reviewed weekly by CEO, CRO, product and legal leadership.
- Top-five customer ARR concentration, gross margin and contract-risk analysis delivered to the board.
- Clear Series B milestones and hiring plan defined, including a no-raise contingency plan.
90 days
- Two or more strategic anchor commitments, paid pilots or advanced procurement processes secured.
- Credential reuse and first-time versus returning-user conversion report completed.
- EU wallet interoperability roadmap and two external partner discussions underway.
- Security, fraud and credential-revocation readiness review completed.
1 year
- Three to five strategic platform wins or equivalent contracted pipeline converted to production.
- Credential reuse reaches at least 15% of checks in mature multi-platform cohorts.
- No customer exceeds 20% of ARR without board-approved strategic rationale and protections.
- At least one wallet, commerce-platform or gaming-platform distribution partnership launches.
- Gross margin remains at or above 88% while implementation time decreases.

Prove these before you commit

The credential network is economically valuable to relying parties.
How to test: Cohort-based conversion, cost and repeat-use analysis.
Pass if: At least 20% reuse in mature participating cohorts and measurable completion or cost advantage.
Large platforms will buy before 2027 rather than wait for ecosystem solutions.
How to test: Named-account procurement evidence and paid commitments.
Pass if: At least $2M in combined credible strategic-account annual contract value within 90 days.
The company can scale while remaining EBITDA-positive or with a controlled burn.
How to test: Bottom-up hiring and implementation capacity model.
Pass if: Each new sales and implementation pod has an expected 18-month or better fully loaded payback.

Get this exact analysis for your idea

Free viability score in 30 seconds — no credit card. Your first full report is on us.

Analyze my idea free

The full idea, as submitted

Overview

Scorecard

Key Risks

Key Opportunities

Executive Summary

Key Findings

Confidence Metrics

Data Availability

Overall Confidence

Lowest Confidence Sections

Recommended Manual Research

Problem & Market

Problem Severity

What they do today

Evidence they'll pay

Key Risks

Key Opportunities

Industry Analysis

Geography Specifics

Identified Industry

Industry Advantages

Industry Disadvantages

Regulatory Environment

Industry Characteristics

Industry Specific Metrics

Key Risks

Key Opportunities

Seasonality

Market Analysis

Market Size

Market Size Forecast

Key Trends

Target Segments

Target Persona (ICP)

What frustrates them

What they want

Where to reach them

What makes them buy

Objections & how to answer

Secondary personas

Key Risks

Key Opportunities

Market Timing

Why Now

Timing Risks

Why Not Later

Why Not Earlier

Market Readiness

Readiness Rationale

Key Risks

Key Opportunities

PESTLE Analysis

Competition & Strategy

Competitor Analysis

Positioning Map

Direct Competitors

Indirect Competitors

Your Advantages

Competitive Gaps

Key Risks

Key Opportunities

Differentiation

Recommendations

Positioning Statement

Current Differentiation

Key Risks

Key Opportunities

SWOT Analysis

Strengths

Weaknesses

Opportunities

Threats

Porter's Five Forces

BCG Growth-Share Matrix

Blue Ocean Strategy

Moat Analysis

7 Powers (Helmer)

Business Model & Financials

Jobs To Be Done