Skip to content
Ordellum Docs

Ordellum AnalyticsLaunching

Private identity verification

Users prove what a service needs to know — and nothing more. Their personal data never leaves their device.

Regulation requires services to verify who their users are, while blockchain culture values privacy. Traditional KYC resolves this badly: personal documents pile up in central databases, creating breach risk, and every new platform repeats the same costly checks.

Zero-knowledge proofs change the trade-off. A user can prove that they are over 18, live in a permitted country or hold accredited-investor status without disclosing a date of birth, address or identification number to anyone.

Age
That the holder is above an age threshold, without revealing the date of birth.
Country of residence
That the holder lives in an allowed country, without revealing the address.
Accreditation
That the holder is an accredited investor, without disclosing assets, bank statements or tax records.
AML risk level
That the holder’s AML risk is within an accepted range.
Income range
That income falls within a range, without stating the amount.
Verification level
That the holder has passed a given level of identity verification.

Each level unlocks higher limits and adds the checks needed to justify them.

Identity verification levels

Level 0 — Anonymous

A wallet signature is enough to begin.

Requirement
Wallet signature verification
Limit
No transfers, or under $100
Monitoring
Automatic rules

  1. Step 1: Upload

    The user submits an identity document.

  2. Step 2: Read

    The document is prepared and its text, machine-readable zone and barcodes are read in many languages.

  3. Step 3: Authenticate

    Security features such as holograms, micro-print and templates are checked.

  4. Step 4: Liveness

    Depth, blink and anti-spoofing checks confirm a real person is present.

  5. Step 5: Face match

    The selfie is matched against the document photo.

  6. Step 6: Pre-screening

    Sanctions, PEP and adverse-media checks run before issuance.

  7. Step 7: Credential

    A zero-knowledge credential is issued and the personal data is deleted.

End-to-end verification
<30 s
Design target
Face-match accuracy
>99%
Design target

What a service learns — and what stays private

  • Scenario: DEX swap

    The service learns
    “Over 18”
    Stays private
    Date of birth

  • Scenario: DeFi lending

    The service learns
    KYC level 2 or above and an allowed country
    Stays private
    Identity and address

  • Scenario: Token sale

    The service learns
    Accredited, country compliant and low AML risk
    Stays private
    Financial details and identity

  • Scenario: DAO vote

    The service learns
    One unique person
    Stays private
    Who that person is

Credentials follow the W3C Decentralised Identifier and Verifiable Credential standards, so an identity created on one platform can be reused on another. Proofs can be verified off-chain or directly by smart contracts, turning identity from an expensive repeated check into a shared infrastructure layer. Each presentation is single-use to prevent replay, and revoked credentials are detected on-chain.

Proof generation
<2 s
On the user’s device
Verification
~10 ms
Per proof
On-chain check on a Layer 2
<$0.18
Compared with $2–10 for a repeated traditional KYC

Performance and cost figures are design targets.

How long each credential stays valid

Age
Validity: 5 years
Country
Validity: 3 years
AML score
Validity: 90 days
Accreditation
Validity: 1 year
Verification level
Validity: 1 year
Source of funds
Validity: 6 months