Skip To Content
logo

EnStream LLP

Jim Brown
55 UNIVERSITY AVENUE, SUITE 903, TORONTO, ONTARIO M5J 2H7

Service Details

Mobile Operator data signals used for identity, and fraud reduction
EnStream is a joint venture of Canada’s leading mobile telecom companies – Bell Mobility, Rogers Communications and TELUS Communications, and provides identity verification and authentication services for 3rd party applications. Our services help protect consumers and business against identity theft and account takeover using real-time mobile network and account information covering over 90% of Canadians, including name, address, DOB, and account type and status. Enhanced services include analytics for name and address matching, mobile device authentication and mobile location services. EnStream services are used today by a wide variety of customers and applications with end-user consent, including: • Banking and Financial Services – As an independent data source for AML compliance, and device and contact number verification • Retail and Payments – Instant credit card issuance and account opening • Lotteries and Gaming – Location verification for service delivery
General Information: Website
Point of Contact: Jim Brown

Role(s)

  • Audit
  • Broker
  • Consulting
  • Service Integrator
  • Service Provider
  • Other - Specify

Capability(ies)

  • Attribute Broker
  • Attribute Provider
  • Audit IAM
  • Audit InfoSec
  • Audit QA
  • Audit Risk
  • Authentication 
  • Authorization
  • Client Identity Verification
  • Consulting IAM
  • Consulting InfoSec
  • Consulting QA
  • Consulting Risk
  • Credential Issuer or Provider
  • Federated Attributes 
  • Federation Operator
  • Identity Proofing
  • Identity Provider
  • Integration
  • Managed Hosting
  • Network Operator
  • Relying Party or Verifier
  • Validating Identity Claims
  • Wallet Provider
  • Other - specify

Client Identity Verification Methods

  • Government-issued photo identification method
  • Credit file method
  • Dual process methodology

Audiences

  • Public Sector Individuals (G2C)
  • Public Sector Organizations (G2B)
  • Public Sector Internal Services (G2)
  • Private Sector Businesses (B2B)
  • Private Sector Consumers (B2C)
  • International and NGO
  • Other - specify

Sectors and Use Cases

  • Academia and Research
  • Agriculture
  • Construction
  • Financial Services
  • Healthcare & Social Services
  • Legal / Law 
  • Manufacturing 
  • Natural Resources 
  • Property Services 
  • Public Sector 
  • Retail & Wholesale Trade
  • Technology & Innovation 
  • Tourism & Hospitality
  • Transportation & Logistics 
  • Other - specify
Other: Crypto, Gaming

Adoption Communities

  • Public sector
  • Large organizations
  • Small organizations
  • Consumer direct
  • Other - specify

Jurisdiction(s)

  • Canada
  • Asia Pacific
  • Europe
  • Indo Pacific
  • North America
  • Latin America
  • Caribbean
  • Global
  • Other - specify
Other: Where required EnStream can support large enterprises with international coverage.

Operational Language(s)

  • English
  • Canadian French
  • Other - specify

Technical Support Language(s)

  • English
  • Canadian French
  • Other - specify

Platform(s) Availability

  • Apple app store
  • Google app store
  • Embedded in client app
  • Microsoft app
  • In-person scanner (hardware)
  • Other - specify
  • None

Cost Model

  • Time period flat fee
  • Pay per use
  • Mixed flat and use
  • Other - specify
  • Not Applicable
Other: Enterprise/Transaction based subscription models available

Service Design Principles

Service Design Principles

  • Accessibility 
  • Auditability
  • Combats fraud
  • Creates efficiencies
  • Diversity, equitability, and inclusion
  • Personal data choice and control
  • Privacy protection and enhancement
  • Transparent governance and operations
  • User-friendly
  • Not applicable

Service Design Tools & Auditability

Design Tools

  • Assurance and risk management framework(s)
  • Codes of practice
  • Community practice guides 
  • Industry, National, International Standards
  • Open source code
  • Regulatory guidance
  • Third-party assessment services
  • Other - specify
  • Not applicable

Protocols Supported

  • API
  • DIDCom (decentralized identifiers)
  • FIDO
  • Hyperledger Indy Aires
  • Oauth
  • OpenID
  • SAML
  • UDAP
  • UMA
  • Other - specify
  • Not applicable

Image Standards Supported

  • GIF
  • JPEG
  • PNG
  • TIFF
  • ISO IEC19794-5 (Passport Image Standard)
  • Proprietary Standards
  • Other - specify
  • Not applicable

Process Standards Considered

  • AODA
  • ETSI EN 301 549 
  • HIPAA 
  • GSA Section 50
  • ISO/IEC 27001
  • ISO/IEC 27018
  • ISO 30107-3
  • ISO 90001
  • NIST 800-63
  • SOC 2 Type 1
  • SOC 2 Type 2
  • WCAG
  • WCAG 2.0 (ISO/IEC40500)
  • WCAG 2.1
  • Other - specify
  • not applicable

Accreditations and Certifications

  • AODA tested
  • FIDO® Certified
  • ETSI EN 301 549 
  • GIAC GSNA
  • GSA Section 508
  • HIPAA self-attest
  • Institute of Internal Auditors, Certified Internal Auditor
  • ISACA CISA
  • ISO/IEC 27001 ISMS
  • ISO/IEC 27001 ISMS Lead Auditor
  • ISO/IEC 27018
  • ISO 30107-3
  • ISO 90001
  • IRCA ISMS Auditor
  • NIST 800-63
  • OpentID Certified
  • SOC 2 Type 1
  • SOC 2 Type 2
  • WCAG
  • WCAG 2.0 (ISO/IEC40500)
  • WCAG 2.1
  • Other - specify
  • Not applicable

Pan-Canadian Trust Framework (PCTF)

Jurisdictional Privacy Law Compliance

  • Canada
  • Asia Pacific
  • Indo Pacific
  • Europe
  • North America
  • South America

Client Identity Verification Methods

Dual Source Method

Validation Letter

No file uploaded

Our service is connected to the following Reliable Source(s).

  • Government-issued or crown-corporation record
  • Canadian credit bureau that is at least six (6) months old
  • Canadian financial institution
  • Canadian utility company
  • Canadian telecommunications company
  • Other - specify other connected reliable sources

Globally, our service can assess Passports from the following number of countries or regions.

Globally, our service can assess National Identity cards from the following number of countries or regions.

Globally, our service can assess Driver's Licenses in the following number of countries or regions. If a jurisdiction has more than 1 version of the same Driver's License, that jurisdiction is counted only once.

Globally, our service can assess the following number of identification records.

Globally, the following number of validated records are accessible in your library.

Our service uses the following Reliable Source(s) as evidence to verify the name and address or name and DOB of the individual whose identity is being verified.

  • Government-issued or crown-corporation record
  • Canadian credit bureau that is at least six (6) months old
  • Canadian financial institution
  • Canadian utility bill company
  • Canadian telecommunications company
  • Other - specify other connected reliable sources

Our service, your agent, nor the individual being verified is a Reliable Source from which you draw information.

  • Yes
  • No

Our service uses the following capabilities to confirm the individual has a deposit account, credit card, or other loans with a financial institution.

  • Interac Verified
  • Other - specify other connected services
Other: n/a

The capability(ies) our service uses, referenced in the previous question, can query the following number of Canadian financial institutions.

  • 1-50
  • 10-50
  • 50-100
  • 100+

Our service uses a Canadian Credit Bureau as one of the Reliable Sources used to satisfy the Dual Process Method requirements, our service confirms the extracted data from the credit file has existed for at least six (6) months.

  • Yes
  • No

When our service uses a Canadian Credit Bureau as one of the Reliable Sources used to satisfy the Dual Process Method requirements, the Credit Bureau acts as an aggregator.

  • Yes
  • No

The Canadian Credit Bureau provides our service with two (2) independent tradelines originating from different sources that are not our own, where each tradeline confirms one of the two categories of information required to verify the individual's identity under the Dual Process Method.

  • Yes
  • No

An explanation of why each Reliable Source your service is connected with is considered well-known and reputable is provided below.

EnStream has direct connections with Bell, Rogers and TELUS providing up to date account information of customers, which therefore qualifies as FINTRAC dual source information (utility information)

Our service receives information from two (2) different Reliable Sources and is ensured as valid and current.

  • Yes
  • No

The information our service collects from Reliable Sources is found in documents.

  • Yes
  • No

The following statements apply to the information our service collects from Reliable Sources found in documents.

  • Documents originate from or are issued by Reliable Sources
  • Documents are provided directly to your service through communications with an official c
  • You are viewing a valid, original, authentic, and current paper or electronic document, not a photocopy or electronic image
  • You are confirming the document is valid and unaltered

Our service allows partial first and last name matches.

  • Yes
  • No

Our service accepts the following match type when matching the address.

  • Only accepts exact matches
  • Accepts partial matches

Our service tests the metadata of uploaded, scanned records.

  • Yes
  • No

Our service has the ability to do “dark web” searches.

  • Yes
  • No

Our service has tools to detect potential fraudulent records (image compares, logo validation, AI).

  • Yes
  • No

Our service can test records in the following approaches.

  • Waterfall only
  • In parallel

Our service has supportive controls of device validation or telco capabilities validation.

Our service makes a dated record of the information obtained available to end users and allows end users to download and retain copies of the documents or records used.

  • Yes
  • No