# Vouched > Vouched verifies an ID document and a selfie with liveness, with optional driver's licence, SSN, TIN, date of birth and AML checks. Jobs are submitted and read through a REST API in US and EU regions. - Canonical: https://www.anchorterminal.com/tools/vouched - Markdown: https://www.anchorterminal.com/tools/vouched.md (~6,400 tokens) - Slim: https://www.anchorterminal.com/tools/vouched.min.md (~1,380 tokens, same facts, less prose, for token-sensitive contexts) - JSON: https://www.anchorterminal.com/tools/vouched.json (this page as data, same URL with Accept: application/json) - Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt) - API: https://www.anchorterminal.com/api/v1/index.json - Updated: 2026-10-14 ## Overview **Grade C · 56.4/100 · rank #673 of 1076 · #13 in Identity & business verification · not agent-ready · confidence medium** ## Assessment Vouched publishes per-transaction prices from $0.75 with a $300 monthly minimum and a 14-day trial, and its docs carry llms.txt, OpenAPI fragments and filterable job search. Rate limits have no number, there is no idempotency key, server SDK or security.txt, and the API status page shows a 70-minute rise in rejections on 1 October 2026. ## Facts | Field | Value | | --- | --- | | Vendor | Vouched Identity, Inc. (https://www.vouched.id) | | Kind | HTTP API | | Category | Identity & business verification (https://www.anchorterminal.com/categories/identity-verification) | | Transport | HTTP | | Auth | API key · Private key in an `X-API-Key` header to https://verify.vouched.id (US) or https://verify.eu.vouched.id (EU). A public key is for capture SDKs and a signature key signs webhooks. One key of each type is active, and recreating it invalidates the old key at once. Separate key sets per group. New keys carry `prv_`, `pub_` and `sig_` prefixes since 7 April 2026. Self-serve sign-up at app.vouched.id/create-account (checked 2026-10-14). | | Pricing | Pay per use ($300 / mo) · Self Starter is $300 a month plus $0.75 a transaction, or $3,000 a year plus $0.70. Essential is $300 a month plus $1.50 a transaction, or $1.40 on an annual plan. Custom plans cover IAL2, driver's licence, SSN and AML checks. A 14-day free trial is advertised. Test accounts aren't billed (https://www.vouched.id/identityverificationpricing, checked 2026-10-14). | | x402 | No · No x402, MPP or L402 in the docs index, the API reference or the pricing page (checked 2026-10-14). | | Licence | Proprietary service under Vouched's Customer Terms of Service. The React Native capture package is Apache-2.0 | | Packages | npm: `@vouched.id/vouched-react-native` | | Docs | https://docs.vouched.id/docs/overview | | llms.txt | https://docs.vouched.id/llms.txt | | Last release | 2026-08-28 | | npm downloads / week | 69 | | Surface graded | Vouched REST API (verify.vouched.id and verify.eu.vouched.id). Vouched's separate Know Your Agent product wasn't graded | | Endpoints | Jobs (submit, find, get, delete, review, PDF), invites, CrossCheck, AML (standalone and enhanced monitoring), private SSN and eCBSV, TIN, DOB, supported documents | | Credentials | Private key in `X-API-Key`, public key for capture SDKs, signature key for webhooks. One active key of each type, group key sets | | Rate limits | One limit for all endpoints, no published figure. 429 on excess | | Payload | Submit Job capped at 20 MB, 413 above | | Webhooks | `X-WebHook-Event` types such as job-idv-complete and job-review, signed with HMAC-SHA1 in `X-Signature`, from published IP addresses | | Test mode | Account-level test accounts with deterministic results keyed on the name test pass. Sandbox mounts only the job endpoints | | Retention | Biometric data deleted when its purpose is met or within 3 years of the last interaction, or earlier at the customer's direction. Delete Job by API | | Regions | US and EU environments. An account exists in one region only | | Status | status.vouched.id on Statuspage with API, Management Portal and JS Plugin components | | Capabilities | kyc.identity, kyc.documents, kyc.screening | | Tags | hosted, api-key, llms-txt, webhooks, free-trial, status-page | | JSON | https://www.anchorterminal.com/api/v1/tools/vouched.json | ## Score breakdown (methodology v0.4, October 2026 research run) Assessed 2026-10-14 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. "This run" is each category's share of the 100 points. | Category | Weight | This run | Score (0–100) | Points | | --- | --- | --- | --- | --- | | Reliability | 16% | 20 | 50 | 10.0 | | Performance | 10% | pending | pending | n/a | | Schema & documentation | 13% | 16.2 | 81 | 13.2 | | Agent ergonomics | 13% | 16.2 | 66 | 10.7 | | Security & auth | 14% | 17.5 | 40 | 7.0 | | Payments & pricing | 10% | 12.5 | 30 | 3.8 | | Task success | 10% | pending | pending | n/a | | Maintenance & community | 7% | 8.8 | 60 | 5.2 | | Transparency & trust (editorial 72, provenance 76) | 7% | 8.8 | 74 | 6.5 | | Negative events | up to −15 | up to −15 | none recorded | 0 | | **Total** | | | | **56.4 → C** | ### Why each score - Reliability 50: Read with the hosted lines. status.vouched.id is a Statuspage with API, Management Portal and JS Plugin components (20). Five incidents between 20 July and 1 October 2026. On 1 October rejection rates rose because of ID data extraction on the API and JS Plugin from 11:45 to 12:55 Pacific, labelled major. AML screening errors on 20 July (6 minutes) were also labelled major, and AML latency on 1 August and SSN and DOB API latency on 21 July were minor. An iOS 27 camera issue opened on 14 September has no resolution date (10). The rate-limit page says all endpoints share one limit and a 429 is returned, with no number (3 of 15). Exponential backoff is advised for 429. No Retry-After or idempotency key was found (7 of 15). No SLA found (0). The API is generally available (10). - Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes. - Schema & documentation 81: Each reference page embeds an OpenAPI 3 fragment of the Vouched API, version 0.13.13, with US and EU servers and the sandbox endpoints described. No standalone spec file was found (20 of 25). llms.txt and a Markdown copy of each page (10). Descriptions say how to use each endpoint, for example that the DOB check is synchronous and shouldn't be polled and that TIN verification has no test mode (15 of 20). Typed schemas with an enumerated list of error types (12 of 15). Error types with explanations, a rejection reasons page and Try It examples (12 of 15). Dated release notes and a shutdown date of 31 January 2027 announced for the standalone AML endpoint. The API itself is unversioned in the path (12 of 15). - Agent ergonomics 66: Find Jobs takes `fields`, `withPhotos`, `withPhotoUrls` and `includeResults`, so responses can drop images and results (20). `page`, `pageSize`, sorting and about 40 filters by status, dates, names, ID type and billable state (20). A typed error envelope with types such as `FaceMatchError` and `AuthenticationError` (15 of 20). No idempotency key, and each submitted job is a new, billable job (5 of 20). No server-side SDK. Example repositories in Python, Java, Node.js and React, plus a JS plugin and mobile SDKs for capture (6 of 15). - Security & auth 40: Three key types, private for backend calls, public for user-facing capture and signature for webhooks. Only one of each is active, and recreating a key invalidates the old one at once. Separate key sets per group. No scopes (18 of 30). The public key can only submit jobs from capture SDKs, and dashboard access supports SAML single sign-on. No read-only API key, and Delete Job needs no confirmation (8 of 20). Responses carry text extracted from identity documents, with no injection guidance (3 of 15). The dashboard lists jobs with billable and review state. No API audit log found (5 of 15). The security page names penetration tests and vulnerability scans and says certifications are available on request. The DPA refers to SOC 2 or ISO 27001 reports from Vouched or its sub-processors. security.txt returns 404 and no bug bounty was found (6 of 20). - Payments & pricing 30: Read with the hosted rubric. No x402, MPP or L402 (0). The pricing page publishes Self Starter at $300 a month plus $0.75 a transaction, or $3,000 a year plus $0.70, and Essential at $300 a month plus $1.50 a transaction (20). A 14-day free trial is advertised. We couldn't confirm whether it needs a card (10 of 20). Sign-up is a browser form at app.vouched.id (0). - Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored. - Maintenance & community 60: Release notes dated 28 August 2026, 47 days ago (20). Entries on 20 July, 4 August, 14 August and 28 August (20). A closed service with release notes and support by email (9 of 15). No server SDK. @vouched.id/vouched-react-native 1.5.3 dates from 2 February 2026 (7 of 15). Example repositories exist. CI wasn't checked (4 of 10). - Transparency & trust 74: Closed service under published Customer Terms of Service, a public DPA and a legal changelog listing each change by date (18 of 30). The biometric notice (updated 12 February 2026) says biometric data is deleted once its purpose is met or within 3 years of the last interaction. The privacy statement has the same date, and EU accounts store data in the EU while processing runs in the US (22 of 30). The standalone AML endpoint carries a shutdown date of 31 January 2027 in the reference (14 of 20). The DPA's Annex III names sub-processors with locations, and the legal changelog records additions such as Anthropic, Vercel and Zilliz on 16 September 2026 (18 of 20). Fix list for a coding agent, everything this grade says the listing lacks, the biggest gain first (16 items): https://www.anchorterminal.com/fixes/vouched.md (JSON https://www.anchorterminal.com/fixes/vouched.json) ### What we couldn't check - Whether the 14-day trial asks for a card. The pricing page doesn't say and we didn't sign up - The numeric rate limit. The docs say only that all endpoints share one limit - Vouched also sells Know Your Agent (kya.vouched.id), which identifies AI agents, with its own docs and pricing. It may fit another category and wasn't graded here - The OpenAPI fragment's info block carries an Apache 2.0 licence, which doesn't match the proprietary service terms - Vouched Identity, Inc. was named Woolly Labs, Inc. until 9 April 2025, per the legal changelog ### Sources - docs index for agents: (seen 2026-10-14) - API overview, regions and authentication: (seen 2026-10-14) - submit job reference with OpenAPI fragment: (seen 2026-10-14) - find jobs reference: (seen 2026-10-14) - rate limiting: (seen 2026-10-14) - keys: (seen 2026-10-14) - test accounts: (seen 2026-10-14) - webhooks: (seen 2026-10-14) - EU data residency: (seen 2026-10-14) - release notes: (seen 2026-10-14) - pricing: (seen 2026-10-14) - security and privacy: (seen 2026-10-14) - legal index: (seen 2026-10-14) - biometric privacy notice: (seen 2026-10-14) - data processing agreement: (seen 2026-10-14) - legal changelog: (seen 2026-10-14) - status incidents (JSON): (seen 2026-10-14) - domain registration: (seen 2026-10-14) ## Who's behind it (provenance 76/100, checked 2026-10-14) | Check | Finding | Points | | --- | --- | --- | | Legal entity named | Vouched Identity, Inc. | 20/20 | | Domain age | vouched.id, registered 2018-11-26 (7 years) | 11/15 | | Endpoint on the vendor's domain | vouched.id | 15/15 | | Terms of service | read, states 5 of the 7 things a reader expects, and has 3 clauses that cost points | 2.3/10 | | Privacy policy | read, states 8 of the 8 things a reader expects, and has 1 clause that costs points | 8/10 | | Status page | status.vouched.id | 10/10 | | Changelog | published | 10/10 | | security.txt | not found | 0/10 | The privacy statement (effective 5 December 2022, updated 12 February 2026) names Vouched Identity, Inc. The legal changelog says the name changed from Woolly Labs, Inc. on 9 April 2025. The API answers at verify.vouched.id and verify.eu.vouched.id, vouched.id subdomains. www.vouched.id/.well-known/security.txt returns 404. RDAP for vouched.id gives a registration date of 2018-11-26. ### Terms and privacy, as read A reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice. **Terms of service** (https://www.vouched.id/company/legal/terms-of-service), read 2026-10-14, dated 2026-02-12, states 5 of the 7 things a reader expects. - To know. Says it may use customer content to train or improve models, and no opt-out was found (costs points). "You authorizes and instructs Vouched, or its third-party service providers (“Service Providers”), to use End User Data to provide the Services, including keeping Vouched AI up to date and performant;" - To know. Restricts benchmarking or competitive use (costs points). "(f) access or use the Services, or output therefrom, to create a competing product or service" - To know. Says the terms or the service can change without notice (costs points). "You acknowledge that: (a) Vouched may update, modify, add, or remove Third Party Services or functionality at any time without notice;" - To know. Says access can be ended without notice or for any reason. "Vouched further reserves the right to modify, suspend, or discontinue the Services at any time with or without notice to You, and Vouched will not be liable to you or to any third party should it exercise such rights." - Gives the date it was last updated. Last updated 2026-02-12. - Names the governing law or courts. The law of the State of Washington. - States a limit on its liability. Capped at the fees paid in the 12 months before the claim or US $100.00. - Not found in the text. Says how changes to the terms are announced. - Not found in the text. Refers to a service level or uptime commitment. - Also in the text (2026-10-14). The customer agrees that Vouched may use its name and logo on the Vouched website and in other materials. "You agree to allow Vouched to use Your name and logo on Vouched’s website and in other materials acknowledging this Agreement." - Also in the text (2026-10-14). Prices may change at any time, with no price protection or refunds. "Prices for our Service may change at any time, and the Service does not provide price protection or refunds in the event of a price reduction or promotional offering." - Also in the text (2026-10-14). After termination the customer has 90 days to request its personal data back, and Vouched deletes remaining copies within 180 days of returning it. "You may request return of Your Personal Data up to ninety (90) days after termination of the Agreement." **Privacy policy** (https://www.vouched.id/company/legal/privacy-statement), read 2026-10-14, dated 2022-12-05, states 8 of the 8 things a reader expects. - To know. Says it may use customer content to train or improve models, and no opt-out was found (costs points). "To train, develop, and improve the artificial intelligence, machine learning, and models that we use to support our Services" - To know. Says it sells personal data or shares it for advertising. "As described in the “Categories of Personal Information We Use and Disclose to Third Parties; and the Purposes of Processing” section, we disclose Personal Information for targeted advertising for the following purposes:" - To know. Has not been updated for three years or more. "Effective December 5, 2022" - Gives the date it was last updated. Last updated 2022-12-05. - Says how long data is kept. For as long as needed, with no period named. - Gives a privacy contact. privacy@vouched.id. - Says where data is transferred or stored. Relies on standard contractual clauses. - Also in the text (2026-10-14). Where a customer instructs it, Vouched may keep personal data after the relationship ends, including to train its AI models. "This may include, where instructed by the controller, retaining certain personal data after the end of our relationship with the controller for a limited period to maintain and improve our identity verification services (including training our AI models)" ## Live (updated 2026-10-14 09:39 UTC) - Vendor status page: none, All Systems Operational - Always current: https://www.anchorterminal.com/api/v1/live/vouched.json ## Probe metrics Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score. ## Prices | Item | Price | Unit | Note | | --- | --- | --- | --- | | Self Starter plan | $300 | per month (plan) | Plus per-transaction fees. $3,000 a year on the annual plan | | Verification, Self Starter plan | $0.75 | per transaction | Monthly plan. $0.70 on the annual plan | | Verification, Essential plan | $1.50 | per transaction | Plus $300 a month. $1.40 on the annual plan | Across all listings: https://www.anchorterminal.com/prices/index.md ## Strengths - Published prices, $300 a month plus $0.75 a transaction on Self Starter, with a 14-day free trial - Find Jobs filters by about 40 fields and can leave out photos and results - Separate private, public and signature keys, with key sets per group - Public DPA with named sub-processors and a dated legal changelog - US and EU environments, with EU account data stored in the EU ## Weaknesses - Rate limits are stated without a number - No idempotency key, and each submitted job is billable - No server-side SDK, only example repositories and capture SDKs - Webhook signatures use HMAC-SHA1 - No security.txt or bug bounty, and certifications only on request ## Before you call it (notes for agents) 1. Use the private key in `X-API-Key` against verify.vouched.id or verify.eu.vouched.id, matching the account's region 2. Check Find Jobs before resubmitting. There is no idempotency key and each job is billed 3. Pass `withPhotos=false` and select `fields` on Find Jobs to keep responses small 4. In a test account, use the name test pass for a clean result and any other name for a failure 5. Back off on 429. All endpoints share one limit and no figure is published ## Similar tools Ranked by shared capabilities, then score. Same-category tools with no shared capability key are listed last. | Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown | | --- | --- | --- | --- | --- | --- | --- | | Didit | BB | 75 | 63 | kyc.identity, kyc.documents, kyc.screening | no | https://www.anchorterminal.com/tools/didit.md | | Persona | B | 69.5 | 192 | kyc.identity, kyc.documents, kyc.screening | no | https://www.anchorterminal.com/tools/persona.md | | Sumsub | B | 68.5 | 220 | kyc.identity, kyc.documents, kyc.screening | no | https://www.anchorterminal.com/tools/sumsub.md | | Plaid Identity Verification | B | 67.1 | 278 | kyc.identity, kyc.documents, kyc.screening | no | https://www.anchorterminal.com/tools/plaid-identity-verification.md | | ComplyCube | B | 63.7 | 403 | kyc.identity, kyc.documents, kyc.screening | no | https://www.anchorterminal.com/tools/complycube.md | | Socure RiskOS | B | 63.5 | 417 | kyc.identity, kyc.documents, kyc.screening | no | https://www.anchorterminal.com/tools/socure-riskos.md | ## Panel reviews (0) Reviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): . Desk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md ## Notable - Published prices from $300 a month plus $0.75 a transaction, with a 14-day free trial (source: ) - Find Jobs takes page, pageSize, field selection and about 40 filters (source: ) - Test accounts return a clean result only for the name test pass, and a failure for any other name (source: ) - The standalone Submit AML Job endpoint shuts down on 31 January 2027 (source: ) - EU accounts store data in the EU while checks are processed on US infrastructure (source: ) - status.vouched.id lists a 70-minute rise in rejection rates on the API and JS Plugin on 1 October 2026 (source: ) - #13 of 16 in Best identity and business verification APIs for AI agents: https://www.anchorterminal.com/best/identity-verification/index.md - All 119 verification comparisons: https://www.anchorterminal.com/compare/identity-verification/index.md ## Compare - [Alloy vs Vouched](https://www.anchorterminal.com/compare/alloy-vs-vouched.md): D 52.4 vs C 56.4 - [ComplyCube vs Vouched](https://www.anchorterminal.com/compare/complycube-vs-vouched.md): B 63.7 vs C 56.4 - [Didit vs Vouched](https://www.anchorterminal.com/compare/didit-vs-vouched.md): BB 75 vs C 56.4 - [Entrust Identity Verification (formerly Onfido) vs Vouched](https://www.anchorterminal.com/compare/entrust-identity-verification-vs-vouched.md): B 62.1 vs C 56.4 - [Jumio vs Vouched](https://www.anchorterminal.com/compare/jumio-vs-vouched.md): C 55 vs C 56.4 - [Middesk vs Vouched](https://www.anchorterminal.com/compare/middesk-vs-vouched.md): C 59 vs C 56.4 - [Persona vs Vouched](https://www.anchorterminal.com/compare/persona-vs-vouched.md): B 69.5 vs C 56.4 - [Plaid Identity Verification vs Vouched](https://www.anchorterminal.com/compare/plaid-identity-verification-vs-vouched.md): B 67.1 vs C 56.4 - [Shufti vs Vouched](https://www.anchorterminal.com/compare/shufti-vs-vouched.md): C 57.8 vs C 56.4 - [Socure RiskOS vs Vouched](https://www.anchorterminal.com/compare/socure-riskos-vs-vouched.md): B 63.5 vs C 56.4 - [Stripe Identity vs Vouched](https://www.anchorterminal.com/compare/stripe-identity-vs-vouched.md): BB 77.7 vs C 56.4 - [Sumsub vs Vouched](https://www.anchorterminal.com/compare/sumsub-vs-vouched.md): B 68.5 vs C 56.4 - [Trulioo vs Vouched](https://www.anchorterminal.com/compare/trulioo-vs-vouched.md): C 58.2 vs C 56.4 - [Veriff vs Vouched](https://www.anchorterminal.com/compare/veriff-vs-vouched.md): C 61.1 vs C 56.4 - [ComplyAdvantage vs Vouched](https://www.anchorterminal.com/compare/complyadvantage-vs-vouched.md): D 52.6 vs C 56.4 ## Verify this listing For the vendor. The badge or a plain link to this page verifies the listing, from a page on vouched.id or one of its subdomains. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{"slug": "vouched", "url": "…"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify HTML badge: ```html Vouched on Anchor Terminal ``` Markdown badge, for a README: ```markdown [![Vouched on Anchor Terminal](https://www.anchorterminal.com/badges/vouched.svg)](https://www.anchorterminal.com/tools/vouched) ``` Plain link: ```html Vouched on Anchor Terminal ``` ## Share this listing For the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Vouched is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score. - Dark: https://www.anchorterminal.com/assets/share/vouched-dark.png - Light: https://www.anchorterminal.com/assets/share/vouched-light.png - Create a video and download its frames: https://www.anchorterminal.com/assets/listing-video/index.html?listing=vouched