发布 HN:Didit(YC W26)——身份验证的 Stripe
嗨,HN,我是阿尔贝托。我和我的同卵双胞胎兄弟亚历杭德共同创办了Didit(<a href="https://didit.me">https://didit.me</a>)。我们正在构建一个统一的身份层——一个处理全球KYC(了解你的客户)、AML(反洗钱)、生物识别、身份验证和防欺诈的单一集成。这里有一个演示:<a href="https://www.youtube.com/watch?v=eTdcg7JCc4M&t=7s" rel="nofollow">https://www.youtube.com/watch?v=eTdcg7JCc4M&t=7s</a>。
作为同卵双胞胎,我们一生都在应对身份混淆,因此我们最终建立一家解决互联网身份问题的公司的事情,多少有些讽刺。
在巴塞罗那长大,我们花了多年时间致力于解决身份问题的产品。我们最终意识到,对于大多数工程团队而言,“全球身份”只是一个虚构的概念——实际上,它是一个支离破碎的混乱。你最终需要拼凑一个提供美国驾照的服务商,一个提供欧洲NFC芯片提取的服务商,另一个用于AML筛查,第四个用于巴西政府数据库验证,第五个用于低端安卓设备的活体检测,还有一个用于生物识别认证和年龄估算的服务商。在适应GDPR或CCPA等本地化法规的同时,将这些服务整合成一个连贯的流程,对大多数团队来说都是一场噩梦。
当我们查看现有的“企业”解决方案时,感到困惑。大多数解决方案需要三周的销售周期才能看到一页文档。定价隐藏在“联系我们”的按钮后,产品本身往往是臃肿的遗留系统,延迟高且准确性差。
我们还注意到一个反复出现的模式:这些工具通常只针对最新的iOS硬件进行优化,在占据市场很大比例的中端或旧款安卓设备上表现不佳。这导致了一个“漏斗”,合法用户因技术摩擦而流失,而欺诈行为则因数据点分散在不同系统中而未被发现。此外,这些系统昂贵,通常需要巨额的年度承诺,使早期阶段的创业公司难以承受。
我们希望构建一个人人可及的系统——一个像Stripe一样的身份工具,你可以在三十秒内获得一个沙盒密钥,并开始进行具有世界级用户体验和透明定价的真实验证。
为了解决这个问题,我们选择了完全垂直整合的“妄想”路径。我们不仅仅是包装现有的API,而是构建了自己的身份验证和生物识别AI模型——从分类和欺诈检测到几乎所有语言的OCR模型。这种垂直整合是我们处理用户数据的基础。因为我们拥有整个技术栈,我们可以从头到尾控制敏感信息的流动。你的用户数据不会在一系列第三方黑箱或地区中介之间来回传递。这使我们能够提供一种安全性和隐私水平,而这在你仅仅是其他人API的协调层时是无法实现的。
我们认为身份验证是互联网中最关键的问题之一,必须以正确和伦理的方式解决。许多人对此持有合理的怀疑,尤其是考虑到最近关于将身份转变为大规模数据收集或监控工具的项目的新闻。我们并不做这种事情,但我们也不希望在未来受到胁迫,因此我们在客户端促进数据最小化。与其让企业要求提供完整的身份证扫描,我们允许他们仅验证特定属性——例如“这个人超过18岁吗?”——而无需查看文件本身。我们的目标是让行业远离数据囤积,朝着零知识或至少最小知识的验证方向发展。
我们一体化的方法的结果是一个提高用户注册率的同时降低身份成本的平台。我们专注于构建一个高信心的自动化循环,将人工审核的需求减少多达90%,捕捉到标准视觉模型遗漏的复杂深度伪造和欺骗尝试。我们的SDK针对低带宽连接进行了优化,确保在遗留提供商通常失败的信号不稳定的3G网络上也能正常工作。
我们已经全面上线,你可以立即访问<a href="https://business.didit.me">https://business.didit.me</a>查看工作流程的编排。我们的定价透明且基于成功;我们不相信将成本隐藏在销售电话后。
我们全天候在这里回答任何问题——无论是关于我们如何处理NFC验证、我们对深度伪造检测的看法、生物识别数据保留的伦理问题,还是我们对身份未来的思考。我们非常希望获得你们对我们的API、平台和集成流程的严厉反馈!
查看原文
Hi HN, I’m Alberto. I co-founded Didit (<a href="https://didit.me">https://didit.me</a>) with my identical twin brother Alejandro. We are building a unified identity layer—a single integration that handles KYC, AML, biometrics, authentication, and fraud prevention globally. Here’s a demo: <a href="https://www.youtube.com/watch?v=eTdcg7JCc4M&t=7s" rel="nofollow">https://www.youtube.com/watch?v=eTdcg7JCc4M&t=7s</a>.<p>Being identical twins, we’ve spent our whole lives dealing with identity confusion, so it is a bit of irony that we ended up building a company to solve it for the internet.<p>Growing up in Barcelona, we spent years working on products where identity issues were a massive pain. We eventually realized that for most engineering teams, "global identity" is a fiction—in reality it is a fragmented mess. You end up stitching together one provider for US driver's licenses, another for NFC chip extraction in Europe, a third for AML screening, a fourth for government database validation in Brazil, a fifth for liveness detection on low-end Android devices, and yet another for biometric authentication and age estimation. Orchestrating these into a cohesive flow while adapting to localized regulations like GDPR or CCPA is a nightmare that makes no sense for most teams to be working on.<p>When we looked at the existing "enterprise" solutions, we were baffled. Most require a three-week sales cycle just to see a single page of documentation. Pricing is hidden behind "Contact Us" buttons, and the products themselves are often bloated legacy systems with high latency and abysmal accuracy.<p>We also noticed a recurring pattern: these tools are frequently optimized only for the latest iOS hardware, performing poorly on the mid-range or older Android devices that make up a huge percentage of the market. This results in a "leaky" funnel where legitimate users drop off due to technical friction and fraud goes undetected because data points are spread across disparate systems. Also, these systems are expensive, often requiring massive annual commits that price out early-stage startups.<p>We wanted to build a system that is accessible to everyone—a tool that works like Stripe for identity, where you can get a sandbox key in thirty seconds and start running real verifications with world-class UX and transparent pricing.<p>To solve this, we took the "delusional" path of full vertical integration. Rather than just wrapping existing APIs, we built our own ID verification and biometric AI models—from classification and fraud detection to OCR models for almost every language. This vertical integration is fundamental to how we handle user data. Because we own the entire stack, we control the flow of sensitive information from end-to-end. Your users' data doesn't get bounced around through a chain of third-party black boxes or regional middle-men. This allows us to provide a level of security and privacy that is impossible when you are just an orchestration layer for other people's APIs.<p>We believe that identity verification is one of the most critical problems on the internet, and must be solved correctly and ethically. Many people are rightfully skeptical, especially given recent news about projects that have turned identity into a tool for mass data collection or surveillance. We don’t do anything of the sort, but we also don’t want to be coerced in the future, so we facilitate data minimization on the customer side. Instead of a business asking for a full ID scan, we allow them to simply verify a specific attribute—like "is this person over 18?"—without ever seeing the document itself. Our goal is to move the industry away from data hoarding and toward zero knowledge, or at least minimal knowledge, verification.<p>The result of our all-in-one approach is a platform that increases onboarding rates while lowering identity costs. We’ve focused on building a high-confidence automated loop that reduces the need for manual review by up to 90%, catching sophisticated deepfakes and spoofing attempts that standard vision models miss. Our SDK is optimized for low bandwidth connections, ensuring it works on spotty 3G networks where legacy providers usually fail.<p>We are fully live, and you can jump into the dashboard at
<a href="https://business.didit.me">https://business.didit.me</a> to see the workflow orchestration immediately. Our pricing is transparent and success-based; we don’t believe in hiding costs behind a sales call.<p>We’re here all day to answer any question—whether it’s about how we handle NFC verification, our approach to deepfake detection, the general ethics behind biometric data retention, or how we think about the future of identity. We’d love your brutal HN feedback on our APIs, platform, and integration flow!