Form

Respondents can use this Word document to develop responses offline and then return to complete the submission in a single session.

1. Contact Information

Provide contact information for internal management and public display.

1.1 Directory listing owner name.(Required)

(Internal use - not visible to the public.)

1.2 Directory listing owner email address.(Required)

(Response will be publicly visible.)

1.3 Organization Name(Required)

(Will be publicly visible.)

1.4 High-resolution JPEG or PNG logo for display on your listing.(Required)

Accepted file types: jpg, jpeg, png, Max. file size: 300 MB.

(Response will be publicly visible.)

1.5 LinkedIn URL.

(Response will be publicly visible.)

1.6 Twitter/X URL.

(Response will be publicly visible.)

1.7 Organization general information URL.(Required)

(Response will be publicly visible.)

1.8 Organization general information email address.(Required)

(Response will be publicly visible.)

1.9 Main office address.(Required)

(Response will be publicly visible.)

2. Service Details

Provide general information about your service, its role(s), and capabilities. A service can be a service/solution provider, audit practice, consulting practice, integrator, or other. IMPORTANT: If your organization offers multiple unique services, complete a separate intake form for each unique service.

2.1 Service name. Note here if your service is consulting, auditing, or integration.(Required)

(Response will be publicly visible.)

2.2 Service description (1000 characters).(Required)

(Response will be publicly visible.)

2.3 Service general information URL.(Required)

(Response will be publicly visible.)

2.4 Service point of contact name.(Required)

(Response will be publicly visible.)

2.5 Service point of contact email.(Required)

(Response will be publicly visible.)

2.6.1 Testimonial 1: Optional

(Response will be publicly visible.)

2.6.2 Testimonial 2: Optional

(Response will be publicly visible.)

2.6.3 Testimonial 3: Optional

(Response will be publicly visible.)

2.7 Select your service role(s).(Required)

Audit

Broker

Consulting

Service Integrator

Service Provider

Other - specify

(Responses will be publicly visible.)

2.7.o Other

2.8 Select your service capability(ies).(Required)

(Response will be publicly visible.)

2.8.o Other

2.9 Our client identity verification service supports the following processes:

Government-issued photo identification method

Credit file method

Dual process methodology

(Responses will be publicly visible.)

2.10 Select the audience(s) your service addresses. The people and organizations that use your service.(Required)

Public Sector Individuals (G2C)

Public Sector Organizations (G2B)

Public Sector Internal Services (G2)

Private Sector Businesses (B2B)

Private Sector Consumers (B2C)

International and NGO

Other (specify)

(Responses will be visible to the public.)

2.10.o Other

2.11 Select the sectors and use cases your service targets.(Required)

(Responses will be publicly visible.)

2.11.o Other

2.12 Select the communities adopting your service.(Required)

Public sector

Large organizations

Small organizations

Consumer direct

Other - specify

(Responses will be publicly visible.)

2.12.o Other

2.13 Select the jurisdiction(s) where your service operates.(Required)

Canada

Asia Pacific

Europe

Indo Pacific

North America

Latin America

Caribbean

Global

Other - specify

(Responses will be publicly visible.)

2.13.o Other

2.14 Select the languages your service supports for users.(Required)

English

Canadian French

Other - specify

(Responses will be publicly visible.)

2.14.o Other

2.15 Select the languages your service supports for technical support.(Required)

English

Canadian French

Other - specify

(Responses will be publicly visible.)

2.15.o Other

2.16 Select the platforms on which your service is available.(Required)

Apple app store

Google app store

Embedded in client app

Microsoft app

In-person scanner (hardware)

Other - specify

None

(Responses will be publicly visible.)

2.16.o Other

2.17 Select the cost model(s) applicable to your service.(Required)

Time period flat fee

Pay per use

Mixed flat and use

Other - specify

Not Applicable

(Responses will be publicly visible.)

2.17.o Other

3. Service Design Principles

Signals of "good" service design. Consider how your service addresses the following: Accessible, inclusive, and open Cost-effective, open to competitive market forces Provides choice, control, and convenience Implements, protects, and enhances privacy Minimizes data transfer between sources Transparent in governance and operation

3.1 Select the design principles your organization and service factored into its capabilities.(Required)

(Responses will be publicly visible.)

3.2 Provide details to explain all the design principle selections completed in the previous question.

(DIACC may use details provided to amplify your capabilities in DIACC communications.)

4. Service Design Tools & Auditability

Signals of "good" service design. Consider how your service addresses the following: Robust, secure, scalable Interoperable with standards and frameworks Built on open, standards-based protocols Able to be independently assessed, audited, and subject to enforcement

4.1 Select the design tools your service applies.

Assurance and risk management framework(s)

Codes of practice

Community practice guides

Industry, National, International Standards

Open source code

Regulatory guidance

Third-party assessment services

Other - specify

Not applicable

(Responses will be publicly visible.)

4.1.o Other

4.2 Select all supported protocol(s).

(Responses will be publicly visible.)

4.2.o Other

4.3 Select all facial capture and photo image standards supported.

GIF

JPEG

PNG

TIFF

ISO IEC19794-5 (Passport Image Standard)

Proprietary Standards

Other - specify

Not applicable

(Responses will be publicly visible.)

4.3.o Other

4.4 Select the accessibility, security, and quality process standards your organization factored into capabilities.

(Responses will be publicly visible.)

4.4.o Other

4.5 Select the accessibility, security, and quality process standards your organization (or employees) claims to hold.

(Responses will be publicly visible.)

4.5.o Other

4.6 Pan-Canadian Trust Framework (PCTF) service design alignment and certification.(Required)

PCTF aligned

Planning PCTF certification

PCTF Certified

Not applicable

(Responses will be publicly visible.)

4.7.1 Select the jurisdictional privacy laws your service complies with.

Canada

Asia Pacific

Indo Pacific

Europe

North America

South America

(Responses will be publicly visible.)

4.7.2 If yes, specify which countries and privacy regulations.

(DIACC may use details provided to amplify your capabilities in DIACC communications.)

5. Client Identity Verification Methods

Client identification methods your service supports. Canada’s Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) defines requirements reporting entities relevant to client identification methods. The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) is the regulator responsible for ensuring adherence to the PCMLTFA legislation. FINTRAC regulations and guidance should be reviewed in conjunction with the information provided in the DIACC Member Services Directory. DISCLAIMER: This DIACC Member Services Directory (Directory) provides general information only and does not constitute authoritative guidance. Refer to the relevant legislation and regulations for guidance. DIACC, and its members, does not accept any responsibility or liability that may occur directly or indirectly as a consequence of the use, application or reliance on the Directory and all information provided within the Directory. An appropriately qualified professional should be consulted for advice in the application of the relevant legislation and regulations, as required. DISCLAIMER: The information contained in the DIACC Member Services Directory (Directory) is for general use purposes only. DIACC makes no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, certification or compliance status, suitability or availability with respect to the Directory or the information, products, services, or related graphics contained on the Directory for any purpose. Any reliance on such information is strictly at your own risk. In no event will DIACC, and its members, be liable for any loss or damage, including without limitation, indirect or consequential loss or damage, or any loss or damage whatsoever arising from loss of data or profits arising out of, or in connection with, the use of the Directory.

5.1.1 Our responses to this survey have been validated by a DIACC Accredited Auditor. The corresponding validation letter is attached.

Accepted file types: pdf, Max. file size: 300 MB.

(Attachments will be publicly visible.)

5.2 GOVERNMENT-ISSUED PHOTO IDENTIFICATION METHOD

Complete the following statements about your service. Select 'Other' if an appropriate option is not listed. Select 'No' if unsure or if this question does not apply.

5.2.1 Your service captures and returns to the relying party the following data points from the government-issued photo identification: person's name, the date on which the person's identity was verified, type of document used (e.g., driver's licence, passport), unique identifying number of the document used, address (if available), jurisdiction (province or state) and country of issue of the document, expiry date of the document, if available (if this information appears on the document or card, it must be recorded).(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.2.2 In addition to Canadian passports and driver’s licenses issued by provinces, territories and the Canadian Department of Defence, your service supports the following documents. (Note: Canadian citizenship card and the laminated certificate Indian Status card not listed due to limited applicability and security features.)

Ontario Health card (only to be used for health purposes)

Quebec Health card

Provincial Photo ID cards (Alberta, Manitoba, New Brunswick, Newfoundland, Labrador, Nova Scotia, Ontario, Prince Edward Island, British Columbia, and Saskatchewan)

Canada/US Nexus (Trusted Traveller)

Canadian Permanent Resident card

Secure Indian Status card

In process

(Responses will be publicly visible.)

5.2.3 Your service verifies documents that are authentic, valid, and current.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.2.4 Globally, identify the number of countries or regions from which your service can assess Passports (for example, 150).

(Response will be publicly visible.)

5.2.5 Globally, identify the number of countries or regions from which your service can assess National Identity cards (for example, 150).

(Response will be publicly visible.)

5.2.6 Globally, identify the number of countries or regions from which your service can assess Driver's Licenses (for example, 500). If a jurisdiction has more than 1 version of the same Driver's License, please only count it as one jurisdiction for this question.

(Response will be publicly visible.)

5.2.7 Globally, identify the number of identification records your service can assess (for example, 1000).

(Response will be publicly visible.)

5.2.8 Your service compares the following known characteristics of the government-issued photo identification document against the following to satisfy that it is an authentic document issued by the competent authority (federal, provincial, or territorial government).

Character spacing

Document size

Document modification (e.g., cut corner)

Document shape

Font position

Font size

Other - specify

Not applicable

(Responses will be publicly visible.)

5.2.8.o Other

5.2.9 Your service compares the following security features of the government-issued photo identification document against the following to satisfy that it is an authentic document issued by the competent authority (federal, provincial, or territorial government).

Holograms

Image frequency

Image positioning

Image size

Position and size of magnetic stripe

Ultraviolet images

Other - specify

Not applicable

(Responses will be publicly visible.)

5.2.9.o Other

5.2.10 Your service compares the following maker features of the government-issued photo identification document against the following markers to satisfy that it is an authentic document issued by the competent authority (federal, provincial, or territorial government).

Markers (logos, symbols or watermarks) positioning

Markers (logos, symbols or watermarks) size

Raised lettering

Other - specify

Not applicable

(Responses will be publicly visible.)

5.2.10.o Other

5.2.11 Your service compares the machine-readable contents of the MRZ/barcode with the font of the OCR-extracted data and highlights mismatches.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.2.12 Your service performs issuer database lookups for international (non-Canadian) verification purposes.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.2.13 Your service can be configured to allow the following regarding capturing government-issued photo identification document(s).(Required)

Real-time government-issued photo identification document(s)

Uploading an existing image file

Both real-time and uploading existing image

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.2.14 Your service reads the machine-readable portion of the photo identification documents as applicable.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.2.15 Your service confirms the document's expiry date is not before the date of the validation session (as required in Canadian Anti-Money Laundering regulations).(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.2.16 Your service tests the algorithm (if applicable) for the unique identifiers against the ones used by the identification document provider (e.g., the last six number of a driver's license matches the DOB of the individual being verified.)(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.2.17 Select all that apply to your service's ability to read machine-readable passports' facial biometric (ICAO 9303) NFC chip.

Android ready now

Android ready in 3 months

Apple ready now

Apple ready in 3 months

Not at this time

Not applicable

(Responses will be publicly visible.)

5.2.18 Your service verifies that a chipped identity document has been authenticated (e.g., Country signer, Active Authentication).(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.2.19 For international verification, your service supports or is investigating mobile driver's license connectivity.

Investigating

Android ready now

Android ready in 3 months

Apple ready now

Apple ready in 3 months

Not at this time

(Responses will be publicly visible.)

5.2.20 An independent 3rd-party evaluated the performance of your service's face recognition algorithm in a one-to-one matching scenario using NIST (National Institute of Standards and Technology) FRVT 1:1 (Face Recognition Vendor Test) or the most recent NIST Face Technology Evaluations - FRTE/FATE.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.2.21.1 Your service performs a 'selfie' liveness check.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.2.21.2 The liveness check is:

Certified by a NIST (National Institute of Standards and Technology) certified testing company to NIST Level 2 ISO 30107-3 for Presentation Attack Detection

Certified to detect and reject presentation attacks

Certified to detect and reject digital injection attacks

Not certified

(Responses will be publicly visible.)

5.2.21.3 The liveness check captures the person's image via:

Computer webcam picture

Computer webcam video

Computer webcam interactive video

Mobile device picture

Mobile device video

Mobile device interactive video

(Responses will be publicly visible.)

5.2.21.4 The liveness detection or genuine presence is verified by:

Active check (person performs actions)

Passive check (live video capture and/or motion detection)

Computer webcam interactive video

Session may be reviewed by human checker

Other - specify

Not at this time

(Responses will be publicly visible.)

5.2.21.4.o Other

5.2.22 The identification information your service verifies is ultimately stored:

By the person being identified (e.g., stored digital identity on their device)

By the vendor on behalf of the subject (e.g., Identity network stores the encrypted access of the digital identity for the person being identified)

By the vendor as directed by the entity receiving the identification information (e.g., financial institution)

By the entity receiving the identification information (e.g., financial institution)

Other - specify

Not sure

Not applicable

(Responses will be publicly visible.)

5.2.22.o Other

5.2.23 Information stays within Canada for the entire session for Canadian government-issued photo identification (i.e., in transit not related to storage).(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.2.24 Your service uses an identity verification network that encrypts all information in a mobile application in transit.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.2.25 Your service uses an identity verification network that stores information with the following selections.

Major cloud providers with Canadian server locations

Major cloud providers with International server locations

Private clouds

Other - specify

Not sure

Not applicable

(Responses will be publicly visible.)

5.2.25.o Other

5.2.26 Your service uses an identity verification network that delivers services via the following.

(Responses will be publicly visible.)

5.2.26.o Other

5.3 CREDIT FILE METHOD

Complete the following statements. Select 'Other' if an appropriate option is not listed. Select 'No' if unsure or if this question does not apply.

5.3.1 Your service receives data from a Canadian Credit Bureau when an individual's identity is verified.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.3.2 Your service confirms the data extracted from the credit file contains information derived from more than one tradeline (i.e., two financial institutions which do not include your customer as one of the tradelines.)(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Responses will be publicly visible.)

5.3.3 Your service receives credit file information directly from a Canadian Credit Bureau (or through a third-party vendor authorized by a Canadian Credit Bureau).(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.3.4 Your service confirms the data extracted from the credit file has existed for at least 3 (three) years.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.3.5 Your service matches the name, address, and DOB of an individual whose identity is being verified with the name, address, and DOB contained in the records of a Canadian Credit Bureau.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.3.6 Your service accepts the following match type when matching the individual's first name.(Required)

Allows partial matches

Only accepts exact matches

(Response will be publicly visible.)

5.3.7 Your service accepts the following match type when matching the individual's last name.(Required)

Allows partial matches

Only accepts exact matches

(Response will be publicly visible.)

5.3.8 Your service accepts the following DOB match types.

Year is an exact match, and the day and month are switched (e.g., 02/10/1980 vs. 10/02/1980).

Year is +/- 1 (one) year, day, and month are exact matches (e.g., 02/10/1980 vs. 02/10/1979).

Other - specify

(Responses will be publicly visible.)

5.3.8.o Other

5.3.9 Your service accepts the following match type when matching the address.(Required)

Allows partial matches

Only accepts exact matches

(Responses will be visible to the public.)

5.3.10 Your service implements and interprets fraud indicator signals.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.3.11 Your service considers address change date, name change date, DOB change date related to a risk profile.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.4 DUAL PROCESS METHOD

Complete the following statements about your service.

5.4.1 Your service is connected to the following Reliable Source(s):

Government-issued or crown-corporation record

Canadian credit bureau that is at least six (6) months old

Canadian financial institution

Canadian utility company

Canadian telecommunications company

Other - specify other connected reliable sources

(Responses will be publicly visible.)

5.4.1.o Other

5.4.2 Globally, identify the number of countries or regions from which your service can assess Passports (for example, 150).

(Response will be publicly visible.)

5.4.3 Globally, identify the number of countries or regions from which your service can assess National Identity cards (for example, 150).

(Response will be publicly visible.)

5.4.4 Globally, identify the number of countries or regions from which your service can assess Driver's Licenses (for example, 500). If a jurisdiction has more than 1 version of the same Driver’s License, please only count it as one jurisdiction for this question.

(Response will be publicly visible.)

5.4.5 Globally, identify the number of identification records your service can assess (for example, 1000).

(Response will be publicly visible.)

5.4.6 Globally, identify the number of validated records accessible in your library (for example, 1000).

(Response will be publicly visible.)

5.4.7 Your service uses the following Reliable Source(s) as evidence to verify the name and address or name and DOB of the individual whose identity is being verified.

Government-issued or crown-corporation record

Canadian credit bureau that is at least six (6) months old

Canadian financial institution

Canadian utility bill company

Canadian telecommunications company

Other - specify other connected reliable sources

(Responses will be publicly visible.)

5.4.7.o Other

5.4.8 Neither your service, your agent, nor the individual being verified is a Reliable Source from which you draw information.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.4.9 Your service uses the following capabilities to confirm the individual has a deposit account, credit card, or other loans with a financial institution.

Interac Verified

Other - specify other connected services

(Select 'Other' if an appropriate option is not listed. Response will be publicly visible.)

5.4.9.o Other

5.4.10 The capability(ies) your service uses, referenced in the previous question, can query the following number of Canadian financial institutions.(Required)

1-50

10-50

50-100

100+

(Response will be publicly visible.)

5.4.11 When your service uses a Canadian Credit Bureau as one of the Reliable Sources used to satisfy the Dual Process Method requirements, your service confirms the extracted data from the credit file has existed for at least six (6) months.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.4.12.1 When your service uses a Canadian Credit Bureau as one of the Reliable Sources used to satisfy the Dual Process Method requirements, the Credit Bureau acts as an aggregator.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.4.12.2 If yes, the Canadian Credit Bureau provides your service with two (2) independent tradelines originating from different sources that are not your own, where each tradeline confirms one of the two categories of information required to verify the individual's identity under the Dual Process Method.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.4.13 Explain why each Reliable Source your service is connected with is considered well-known and reputable.

(Response will be publicly visible.)

5.4.14 Your service receives information from two (2) different Reliable Sources and is ensured as valid and current.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.4.15.1 The information your service collects from Reliable Sources is found in documents.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.4.15.2 If yes, the following statements apply to the information your service collects from Reliable Sources found in documents.

Documents originate from or are issued by Reliable Sources

Documents are provided directly to your service through communications with an official c

You are viewing a valid, original, authentic, and current paper or electronic document, not a photocopy or electronic image

You are confirming the document is valid and unaltered

(Responses will be publicly visible.)

5.4.16 Your service allows partial first and last name matches.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.4.17 Your service accepts the following match type when matching the address.(Required)

Only accepts exact matches

Accepts partial matches

(Response will be visible to the public.)

5.4.18 Your service tests the metadata of uploaded, scanned records.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.4.19 Your service has the ability to do “dark web” searches.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.4.20 Your service has tools to detect potential fraudulent records (image compares, logo validation, AI).(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)

5.4.21 Your service can test records in the following approaches.(Required)

Waterfall only

In parallel

(Response will be publicly visible.)

5.4.22 Your service has supportive controls of device validation or telco capabilities validation.

Device history with a consortium

Device and technology tracing with a telco

Search the account information of a telco

(Responses will be publicly visible.)

5.4.23 Your service makes a dated record of the information obtained available to end users and allows end users to download and retain copies of the documents or records used.(Required)

Yes

(Select 'No' if unsure or if this question does not apply. Response will be publicly visible.)