IndyKite

Patricia Alfheim

1 Ferry Building, San Francisco California 94111

Service Details

IndyKite Platform

IndyKite is building a new category of data management and digital identity services by capturing, connecting and controlling data across the enterprise and surrounding ecosystem. With an identity-centric approach to data, IndyKite enables companies to achieve higher trust in their data products, AI and applications with enhanced visibility, data governance and granular access controls. Leveraging knowledge graph technology and machine learning, IndyKite delivers a powerful operational data layer to enable developers with flexible APIs through a growing open-source ecosystem.

General Information: Website

Point of Contact: Enquiries

Role(s)

Audit
Broker
Consulting
Service Integrator
Service Provider
Other - Specify

Capability(ies)

Attribute Broker
Attribute Provider
Audit IAM
Audit InfoSec
Audit QA
Audit Risk
Authentication
Authorization
Client Identity Verification
Consulting IAM
Consulting InfoSec
Consulting QA
Consulting Risk
Credential Issuer or Provider
Federated Attributes
Federation Operator
Identity Proofing
Identity Provider
Integration
Managed Hosting
Network Operator
Relying Party or Verifier
Validating Identity Claims
Wallet Provider
Other - specify

Other: Identity matching, metadata (attribute) management, AI access control, CIAM

Client Identity Verification Methods

Government-issued photo identification method
Credit file method
Dual process methodology

Audiences

Public Sector Individuals (G2C)
Public Sector Organizations (G2B)
Public Sector Internal Services (G2)
Private Sector Businesses (B2B)
Private Sector Consumers (B2C)
International and NGO
Other - specify

Sectors and Use Cases

Academia and Research
Agriculture
Construction
Financial Services
Healthcare & Social Services
Legal / Law
Manufacturing
Natural Resources
Property Services
Public Sector
Retail & Wholesale Trade
Technology & Innovation
Tourism & Hospitality
Transportation & Logistics
Other - specify

Adoption Communities

Public sector
Large organizations
Small organizations
Consumer direct
Other - specify

Jurisdiction(s)

Canada
Asia Pacific
Europe
Indo Pacific
North America
Latin America
Caribbean
Global
Other - specify

Operational Language(s)

English
Canadian French
Other - specify

Technical Support Language(s)

English
Canadian French
Other - specify

Platform(s) Availability

Apple app store
Google app store
Embedded in client app
Microsoft app
In-person scanner (hardware)
Other - specify
None

Cost Model

Time period flat fee
Pay per use
Mixed flat and use
Other - specify
Not Applicable

Service Design Principles

Accessibility
Auditability
Combats fraud
Creates efficiencies
Diversity, equitability, and inclusion
Personal data choice and control
Privacy protection and enhancement
Transparent governance and operations
User-friendly
Not applicable

Service Design Tools & Auditability

Design Tools

Assurance and risk management framework(s)
Codes of practice
Community practice guides
Industry, National, International Standards
Open source code
Regulatory guidance
Third-party assessment services
Other - specify
Not applicable

Protocols Supported

API
DIDCom (decentralized identifiers)
FIDO
Hyperledger Indy Aires
Oauth
OpenID
SAML
UDAP
UMA
Other - specify
Not applicable

Image Standards Supported

GIF
JPEG
PNG
TIFF
ISO IEC19794-5 (Passport Image Standard)
Proprietary Standards
Other - specify
Not applicable

Process Standards Considered

AODA
ETSI EN 301 549
HIPAA
GSA Section 50
ISO/IEC 27001
ISO/IEC 27018
ISO 30107-3
ISO 90001
NIST 800-63
SOC 2 Type 1
SOC 2 Type 2
WCAG
WCAG 2.0 (ISO/IEC40500)
WCAG 2.1
Other - specify
not applicable

Accreditations and Certifications

AODA tested
FIDO® Certified
ETSI EN 301 549
GIAC GSNA
GSA Section 508
HIPAA self-attest
Institute of Internal Auditors, Certified Internal Auditor
ISACA CISA
ISO/IEC 27001 ISMS
ISO/IEC 27001 ISMS Lead Auditor
ISO/IEC 27018
ISO 30107-3
ISO 90001
IRCA ISMS Auditor
NIST 800-63
OpentID Certified
SOC 2 Type 1
SOC 2 Type 2
WCAG
WCAG 2.0 (ISO/IEC40500)
WCAG 2.1
Other - specify
Not applicable

Pan-Canadian Trust Framework (PCTF)

Jurisdictional Privacy Law Compliance

Canada
Asia Pacific
Indo Pacific
Europe
North America
South America

Client Identity Verification Methods

Dual Source Method

Validation Letter

No file uploaded

Our service is connected to the following Reliable Source(s).

Government-issued or crown-corporation record
Canadian credit bureau that is at least six (6) months old
Canadian financial institution
Canadian utility company
Canadian telecommunications company
Other - specify other connected reliable sources

Globally, our service can assess Passports from the following number of countries or regions.

Globally, our service can assess National Identity cards from the following number of countries or regions.

Globally, our service can assess Driver's Licenses in the following number of countries or regions. If a jurisdiction has more than 1 version of the same Driver's License, that jurisdiction is counted only once.

Globally, our service can assess the following number of identification records.

Globally, the following number of validated records are accessible in your library.

Our service uses the following Reliable Source(s) as evidence to verify the name and address or name and DOB of the individual whose identity is being verified.

Government-issued or crown-corporation record
Canadian credit bureau that is at least six (6) months old
Canadian financial institution
Canadian utility bill company
Canadian telecommunications company
Other - specify other connected reliable sources

Our service, your agent, nor the individual being verified is a Reliable Source from which you draw information.

Our service uses the following capabilities to confirm the individual has a deposit account, credit card, or other loans with a financial institution.

Interac Verified
Other - specify other connected services

The capability(ies) our service uses, referenced in the previous question, can query the following number of Canadian financial institutions.

1-50
10-50
50-100
100+

Our service uses a Canadian Credit Bureau as one of the Reliable Sources used to satisfy the Dual Process Method requirements, our service confirms the extracted data from the credit file has existed for at least six (6) months.

When our service uses a Canadian Credit Bureau as one of the Reliable Sources used to satisfy the Dual Process Method requirements, the Credit Bureau acts as an aggregator.

The Canadian Credit Bureau provides our service with two (2) independent tradelines originating from different sources that are not our own, where each tradeline confirms one of the two categories of information required to verify the individual's identity under the Dual Process Method.

An explanation of why each Reliable Source your service is connected with is considered well-known and reputable is provided below.

Our service receives information from two (2) different Reliable Sources and is ensured as valid and current.

The information our service collects from Reliable Sources is found in documents.

The following statements apply to the information our service collects from Reliable Sources found in documents.

Documents originate from or are issued by Reliable Sources
Documents are provided directly to your service through communications with an official c
You are viewing a valid, original, authentic, and current paper or electronic document, not a photocopy or electronic image
You are confirming the document is valid and unaltered

Our service allows partial first and last name matches.

Our service accepts the following match type when matching the address.

Only accepts exact matches
Accepts partial matches

Our service tests the metadata of uploaded, scanned records.

Our service has the ability to do “dark web” searches.

Our service has tools to detect potential fraudulent records (image compares, logo validation, AI).

Our service can test records in the following approaches.

Waterfall only
In parallel

Our service has supportive controls of device validation or telco capabilities validation.

Our service makes a dated record of the information obtained available to end users and allows end users to download and retain copies of the documents or records used.