Learn

Glossary, A to Z

Plain-language definitions of the terms used across the docs, the admin and the flow.

Search the glossary

29 of 29 terms

AML

Anti-Money Laundering. Screening a person or company against sanctions, watchlists and politically exposed person lists to reduce the risk of financial crime. In Konnect ID it is an optional check per session; a potential match sends the session to manual review.

Application

The record of extracted data, verification reports, face match result and history that belongs to a session. Fetched with the info endpoint.

CIN

Carte d'Identité Nationale, the national identity card (here the Tunisian card, with an 8-digit number). The document type the flow reads and checks.

dHash / perceptual hash

A small fingerprint of what an image looks like rather than its exact bytes. Two photos of the same picture that were resized or recompressed produce very similar hashes, so near duplicates can be found by a small Hamming distance.

EXIF

Metadata embedded in photos (camera model, date, and sometimes the editing software). An editing-software name in EXIF is one signal that a picture was processed. It is easy to remove, so absence proves nothing.

Face match / similarity

A score from 0 to 100 describing how similar the face on the ID is to the selfie. At or above FACE_MATCH_THRESHOLD (default 85) it counts as a match.

FATCA / US person

US tax rules requiring financial institutions to identify account holders who are US persons. The flow can ask the applicant a US-person question (enableAmerican) to support that declaration.

HMAC

Hash-based Message Authentication Code. A hash computed with a shared secret, proving a message came from someone who knows the secret and was not altered. Webhooks are signed with HMAC-SHA256.

Idempotency

Handling the same event twice has the same effect as handling it once. Webhooks can be delivered more than once, so handlers must be idempotent and deduplicate on the delivery id.

KYB

Know Your Business. Verifying a company and the people behind it, rather than an individual.

KYC

Know Your Customer. Verifying who a person is before doing business with them, typically with an ID document and a selfie.

Liveness

Evidence that the selfie is of a real, present person and not a photo, screen or mask. Konnect ID checks selfie quality (one face, sharp, lit, frontal, eyes open, uncovered) but this is not a certified liveness or anti-spoofing solution.

Manual review

A human checks a session the automation would not approve on its own. Sessions enter status VERIFICATION with the reasons listed, and a reviewer approves or declines.

OCR

Optical Character Recognition. Reading printed text from the card image into fields such as name, birth date and ID number. Each field comes with a confidence value.

Passkey (result passkey)

An 8-character code returned when a session is created. It unlocks the hosted result page for a reviewer without an admin account. Treat it as a credential.

PEP

Politically Exposed Person. Someone with a prominent public role, or a close relative or associate of one, who carries higher corruption risk. Screened as part of AML; the flow can also ask the applicant (enablePPE).

persistData / ephemeral

persistData=false makes a session ephemeral: extracted data is kept in memory only and removed after you fetch it once, or after a time limit.

PII

Personally Identifiable Information: anything that identifies a person, such as name, ID number, birth date and face images.

Presigned URL

A temporary, signed link that grants access to one stored file (for example a document image) for a short time without exposing storage credentials.

Risk score

A number from 0 (safe) to 100 (very risky) summarizing the checks: below 20 is low, below 50 medium, otherwise high. It helps reviewers prioritize; it is not a probability.

RTL

Right-to-left layout, used for Arabic. The flow mirrors its layout when the language is Arabic.

Sanctions

Legal restrictions against named people, companies or countries. Doing business with sanctioned parties can be illegal, so they are screened as part of AML.

Session

One verification attempt by one person, identified by a sessionId. It has a status that moves from INITIATED to a final decision.

SHA-256

A cryptographic hash producing a 64-hex-character fingerprint of exact bytes. Identical files give identical hashes, so it detects exact copies. It is also the hash inside the webhook HMAC.

UBO / bénéficiaire effectif

Ultimate Beneficial Owner: the natural person who ultimately owns or controls a company, usually above an ownership threshold. KYB verifies who they are.

Webhook

An HTTP request Konnect ID sends to your server when something happens, so you do not have to poll.

White-label

Presenting the flow under your own brand, with your logo, colors, fonts and language, rather than the vendor's.

AML