Sales collateral, technical references, and live playgrounds for KYC and KYT. Built for compliance, security, and engineering buyers who need to move past a sales call and see what the platform actually does.
Active label set in the screening graph, with acceptance tiers showing the validation gate each source must pass before upsert. Honest counts, not marketing aggregates.
OFAC SDN sanctioned addresses, cross-referenced across independent sources and screened on every KYT request. EU and UN consolidated lists are on the roadmap, not yet live.
See trust pageUSDT, USDC and other issuer-frozen addresses ingested from on-chain enforcement events.
See trust pageCurated threat intel feed of phishing operators and drainer infrastructure addresses.
See trust pageDeduplicated across all accepted sources. Growing through the documented 5-phase ingestion plan. Live breakdown on the trust page.
Methodology & tiersAuto-detection plus cross-chain trace. EVM L2s share the ETH label graph; new chains add via ingestion adapters.
Full source listFast-path cache returns sanctioned wallets quickly. See the KYT product page for live-measured latency benchmarks.
Live metrics dashboardDocument OCR, MRZ parsing, and structured extraction running against a two-provider pipeline with a hard fallback path. No single vendor lock-in.
Primary: MyAi, a vision model we host ourselves. Fallback: Google Gemini 2.5 Flash — not Anthropic; identity-document images are never sent to Claude. Driver's licenses, passports, national IDs, utility bills.
ICAO 9303 machine-readable zone extraction for passports and ID cards. Check-digit validation on every field.
Names, DOB, document number, issue/expiry, issuing authority, address. Returned as a typed payload.
Per-org retention TTL, legal hold flag, encrypted-at-rest blob storage. SAR / FinCEN JSON export shipped.
Three-step browser challenge with face match against the ID portrait, behind recorded biometric consent. Below-threshold scores escalate to manual review rather than passing. No independent presentation-attack-detection certification — see /trust.
Everything the dashboard does is callable from the API. Verify in production what you tested in the playground.
Sign up, grab an API key, make a call. No sales call required to start. Full SDK references and webhook patterns on the developers page.
# Screen a wallet against the full label graph curl https://kyt.infinihash.com/api/v1/screen \ -H "X-API-Key: ih_live_..." \ -H "Content-Type: application/json" \ -d '{"type":"wallet","value":"0x722122dF12D4e14e13Ac3b6895a86e84145b6967","chain":"ETH"}' # Response (truncated) { "risk_level": "critical", "risk_score": 100, "action": "block", "entity_name": "Tornado Cash", "flags": { "events": [...] } }
Honest, current status. We say "in progress" when it is in progress and "planning" when it is. No aspirational certifications.
SOC 2 program in progress — no report issued yet. Pre-attestation security questionnaires available on request.
Published data-subject rights workflow and RoPA. Still open: counsel-reviewed Privacy Policy, and a Data Processing Agreement — none is available for signature yet, and we do not offer one on request until it is. No formal certification exists for GDPR. See /trust.
KYC + KYT operational. SAR / FinCEN JSON export shipped. Used by regulated DAS and OTC counterparties.
OFAC SDN cryptocurrency addresses on every KYT request. UN and EU consolidated lists on roadmap.
Scoping ISMS, control mapping, and gap assessment. No fixed certification date.
Privacy notice published, consumer rights inbox monitored, cookie consent layer live. Still open: counsel-reviewed Privacy Policy. See /trust.
Single-region today on AWS us-east-2 behind a Cloudflare tunnel. Built for honesty about scope rather than abstract scalability claims.
EC2 m7g.xlarge ARM host running multiple Incus containers for auth, billing, KYC, KYT, and the Next.js retail UI. Single bridge for now; multi-region on the roadmap as customer geography demands.
Origin-protected via Cloudflare Tunnel; no exposed inbound ports on the AWS side. WAF + DDoS protection on the edge layer. Predictable egress.
Per-service Postgres instances. Encrypted at rest. Per-org retention TTL on KYC documents with legal-hold override.
We do not claim multi-region HA. A us-east-2 outage takes us down. Documented honestly so buyers can match expectations to deployment reality.
Operational metrics published continuously. Not vanity totals: actual screen volume, label-set size, ingestion lag, and uptime.
Public ticker covering screen volume, label-set size, sanctions hits, and platform uptime. Refreshed continuously.
Open metricsService-by-service health for auth, billing, KYC API, KYT API, and the marketing site. Incidents posted in real time.
Open statusCompliance posture, KYT acceptance tiers, subprocessor list, and security contact in one place.
Open trustTwo product surfaces for evaluation: guided onboarding for self-serve signup, and no-signup playgrounds for an immediate "does this work?" feel.
Provision an org, configure document policy, generate API keys, run a verification, and wire your webhook. Self-serve, no sales call.
Start KYC onboardingProvision an org, generate API keys, and run your first screen. Drops you on the screenings dashboard at the end.
Start KYT onboardingPaste any wallet address (BTC, ETH, Base, Solana). See real risk score, level, action, entity, and a sample signal. Rate-limited per IP.
Open KYT playgroundSee what a real OCR result looks like for a sample passport / ID. Live verification requires a free signup so we don't expose anonymous quota.
Open KYC playground