Understanding Customer Reports

The Customer Report is an essential tool for maintaining accurate records of your customer interactions and verifying their identity. This report serves as a comprehensive record of the detailed information gathered about your customers, as well as the verification checks conducted to ensure compliance with regulatory requirements. By downloading and saving this report, you can demonstrate that your organization has fulfilled its obligations regarding customer due diligence. By doing so, you establish a robust audit trail, demonstrating to regulators and stakeholders that your organization has conducted thorough due diligence on its customers.

To offer a comprehensive understanding of the checks conducted on the customer and the resulting outcomes, the PDF report is segmented into various sections. Each section contains comprehensive details with key points underlined for clarity. Access these sections below by clicking on each tab, accompanied by example information for better understanding.

1. About the PDF

The Customer Report provides a record of the detailed information collected about your customer and the verification checks performed against that individual. The report should be downloaded and saved against your customer records to prove that you have completed customer due diligence.

The following Core Identity (including Address) Check are:·

• ID & Liveness

• PEP & Sanctions

• Address Verification

• Geolocation

• Proof of Address

For each verification check we use information captured in the mobile app and each check will have a result of either ‘Passed’, ‘Review required’, ‘Failed’, ‘Manually accepted’, or ‘Manually rejected’,

Result	Description
PASSED	The customer has met the criteria to pass the check.
REVIEW REQUIRED	The customer did not pass the check and it needs to be reviewed.
FAILED	The check was unable to be performed.
MANUALLY ACCEPTED	The user has manually accepted the check that is in review status
MANUALLY REJECTED	The user has manually rejected the check that is in review status

IMPORTANT NOTE: The report will only be available when the customer has completed all the actions in the mobile app.

2. Customer Information

Verify captures information about your customers when they use the mobile app. This includes personal details, biometric information, their residential address, contact information, and device geolocation. This information is used when performing the checks.

Customer information section on PDF report

• Personal details:

The individual's name, date of birth, and sex are captured during the mobile journey. This is compared with the invite information as well as used for the verification checks.

• Current residential address:

Your Customer starts by searching for their address on ‘international look-up’ or can complete the address form within the mobile app. The individuals address is captured in a structured format. This is used for various checks but predominantly for our AML residential address verification.

• Contact information:

This section shows the individual’s email address used for the invite. We will be capturing more contact details in future updates.

• Geolocation check:

The country of residential address and device location are compared. If they match, the check passes. The customer must give permission for us to capture these coordinates through their mobile device location setting.

• Agreement to terms:

When the customer first accesses the mobile app we ask them to confirm our End User Terms and Privacy Policy. This is stored and provided on the Customer Report as a record that Tiller has been given permission to process the individual’s data.

3. ID & Liveness

The Identity Document scan and biometric liveness test are performed for this check. It ensures the authenticity of the customer's identification documents (passport, driver's licence, or national ID card), and it validates that the person providing the ID is the same one in the document photo (i.e., the person is 'alive' and not a photo or a video recording).

The following needs to be successful for this check to pass: document verified, liveness test, and biometric face match.

3.1 - Document information

The customer selects one of the following identity documents:

• Passport,

• Drivers Licence, or

• National Identity Card.

Verify by Tiller supports 1,335 document types across 176 different countries. More detailed information can be viewed on {{link to country document placeholder}}

The document name and country of origin will be determined if recognised.

Verify will scan the document and extract the information through OCR (optical character recognition) and NFC (near field communication - passport only). The document image, information, and portrait are used to perform the verifications. All the details captured are available in the customer report.

OCR - Technology used to convert printed text into machine-readable text.

NFC - Wireless communication to extract information and images from the embedded passport chip. This method is highly accurate and adds an additional layer of security. Passport NFC capture is always the preferred way of getting the customers ID information.

---

3.2 - Verified document

The recognised document is checked for its authenticity, and personal detail accuracy and validates its information. If any of the results require review it will state the reason.

Verified document information

Details

Type	Description
Document front side check	The front of the document checked against official templates to ensure its authenticity.
Underage rule	The individual must be over the age of 18.
Document blocking policy	None of the document images or information has been blocked or is unable to be read as a valid document.
Document support	The document type must be supported by our services. Our service supports over 1,300 document types across 173 countries.
Document validation	A number of checks are made to ensure the integrity of the document. This is designed to detect signs of tampering, defacement, and other issues. Factors include Lighting - Poor lighting or overexposure can prevent the document validation. Obstructions - If the document has been obstructed in any way which might prevent a validation. Glare - Significant glare on the document surface may impact the quality of the capture. Should the integrity not be successfully validated for any reason this check will not be successful.

3.3 - Liveness

The Liveness check ensures customers are personally conducting the identity check. Instead of just comparing a document image to a selfie, Liveness involves customers in live, randomised physical activities, like smiling or head tilting. This real-time interaction significantly lowers the chance of photo or video deception.

Liveness check

• ‘Active’ liveness: The customer is asked to perform four separate random actions. The sequence is randomised so that fraudsters are unable to prepare these actions in advance using images or video

• Liveness overall failure reason: The overriding reason for failure is shown in this section. This is ‘None’ when the check has passed.

---

3.4 - Verify face match

Our Face Match service uses advanced biometric technology to ensure the person undergoing the identity check is the same as the one pictured in the provided identification document.

The confidence score:

68 facial features between the live facial image captured and the reference photo on the presented identity document are analysed to determine the confidence score. The higher the score, the stronger the match.

The confidence score must be over 60% for the result to pass

ID Photo and Chip Photo

• ID Photo - The ID portrait photo is extracted from the ID document. This is the default method of retrieving the reference photo for the supported photo ID.

• Chip Photo - Modern passports contain an NFC chip which holds biometric data and the passport image. If available, the NFC image and data are compared with the captured live facial image. This NFC image will provide an extra layer of verification with a high rate of accuracy.

4. PEP & Sanctions

If a match is identified the check will be unsuccessful and require further review. We'll also explain why the individual was flagged as a Politically Exposed Person (PEP)

The PEP and Sanctions screening service detects individuals who are considered Politically Exposed Persons (PEPs) and those listed in international sanctions databases. Through third-party verification, the service continuously checks against major sanctions lists like the United Nations (UN), European Union (EU), Office of Foreign Assets Control (OFAC), and Office of Financial Sanctions Implementation (OFSI) for any new updates.

For PEP data, information is sourced from multiple reliable sources, including CIA World Leaders, CIA World Factbook, Rulers articles and other databases continually monitored to additional information, Gov’t/Official websites covering all levels of PEPs, Other useful open sources. For example, those independent from the state control, and selected media websites for regular (daily) media checks.

The sanctions screening monitors internationally recognised (e.g. OFSI, OFAC, US State Department, UK & EU Sanctions) and locally enforcement sanctions lists to ensure compliance with regulations, regardless of your geographical location.

It helps you identify potential reputational and operational risks as well as adherence to anti-money laundering (AML) & countering the financing of terrorism (CFT) and sanctions regulations and due process.

4.1 PEP Check

4. PEP & Sanctions

If a match is identified the check will be unsuccessful and require further review. We'll also explain why the individual was flagged as a Politically Exposed Person (PEP)

The PEP and Sanctions screening service detects individuals who are considered Politically Exposed Persons (PEPs) and those listed in international sanctions databases. Through third-party verification, the service continuously checks against major sanctions lists like the United Nations (UN), European Union (EU), Office of Foreign Assets Control (OFAC), and Office of Financial Sanctions Implementation (OFSI) for any new updates.

For PEP data, information is sourced from multiple reliable sources, including CIA World Leaders, CIA World Factbook, Rulers articles and other databases continually monitored to additional information, Gov’t/Official websites covering all levels of PEPs, Other useful open sources. For example, those independent from the state control, and selected media websites for regular (daily) media checks.

The sanctions screening monitors internationally recognised (e.g. OFSI, OFAC, US State Department, UK & EU Sanctions) and locally enforcement sanctions lists to ensure compliance with regulations, regardless of your geographical location.

It helps you identify potential reputational and operational risks as well as adherence to anti-money laundering (AML) & countering the financing of terrorism (CFT) and sanctions regulations and due process.

4.1 PEP Check

In the PEP & Sanctions database check, a multi-layered approach is used to identify potential matches. The individuals personal details are cross-referenced against the individuals on the available lists. The check will pass if no match is found.

PEP check result example

4.2 Sanctions Check

For the Sanctions database check, we employ a multi-layered approach to detect potential matches by cross-referencing individuals against available lists. If a check is under review, we furnish comprehensive details regarding the list where the individual appears, including the source, original name, title, date, and URL link for further investigation.

5. Address Verification

Our international address verification process leverages multiple third-party regulatory-quality data sources to verify the address information provided by your customers. These sources differ depending on the country, but commonly include credit agency records, voter & other government databases, utility companies, landline telephone companies, citizen card information, and more. We specifically exclude lower-quality sources such as marketing databases, as they are not typically deemed to be sufficiently reliable for regulatory purposes.

During the address capture within the mobile app, the user searches for their address using an international address lookup. The address is structured to provide the highest match rate from our sources. The country is identified and up to three sources with the highest available match rates are checked against the individuals address and personal details for a match. If a match is found, the Address Verification check will pass.

5.1 Address verification example

The address verification service will check up to three separate sources, depending on country availability. Should a sufficient match be found the check will pass. Each source can have different underlying results in the details table. Therefore results types will differ depending on the source. The source will pass provided that that at least the minimum required underlying results have passed.

This source has passed due to enough successful results to determine a match.

Below is an example of a UK address source:

Registry of death

We checked the provided full name against the Registry of Deaths, which keeps records of people who have passed away. We check to ensure the data subject has not been recorded on the death register.

Name, address and date of birth

The customer's name, address, and date of birth have been matched on one or multiple underlying sources. The distinct count and sum of the data sources matches are also assessed to contribute to the result.

Name and address (ID Authenticate)

In some instances, an additional check using the national ID number is performed. In this case a national ID number was not available, therefore the result was unsuccessful. The overall address verification has still passed as sufficient other results have been matched.

6. Proof of Address

The Proof of Address upload can be used as a secondary method of address verification should the our international address verification service be unsuccessful. The customer must select from a configurable list of acceptable document types. These currently include:

• Telephone bill

• Tax assessment notice

• Water bill

• Electricity or gas bill

• Credit card statement

The customer must also confirm the issue date of the document. This must be at least within the last three months.

6.1 Proof of address document

The captured proof of address document is available to view on the PDF. It should be noted that no digital checks are performed on the document. It is for supplementary evidence only.

• Document type: The customer selects the document type from the list above. This list is configurable and additional document types can be added if required.

• Issue date: The issue date confirmed by the customer is shown on the PDF. This must be within the previous three months for the user to be able to proceed.

7. Comments

Making comments

Comments can be made against the individual during their application. It provides a useful way to record actions or notes. These comments may contain various elements observed throughout the verification process or additional contextual information relevant to the individual’s profile. They can be valuable to supplement the results of each check.

Any comments made against the individual will appear on the customer report. Each comment has a time stamp and record of the user that submitted it.