SDK Compliance Guide
This guide helps developers configure the ID Verification for Financial Services SDK correctly. It helps prevent violations of end-user personal information rights when using third-party SDKs and supports compliance with personal information protection regulations.
Example Privacy Policy Disclosure for the SDK
App operators must clearly inform end users about how the ID Verification for Financial Services SDK handles personal information. This includes the SDK name, business function, purpose of processing personal information, types of personal information collected, and a link to the privacy policy. Your app must include a standalone privacy policy that discloses your use of the ID Verification for Financial Services SDK.
For example, include the following in your app’s Third-Party Sharing Checklist:
SDK name: ID Verification for Financial Services SDK
Business function: Identity authentication
Types of personal information collected: Fill in based on your actual configuration
Permissions used: Fill in based on your actual configuration
Privacy policy link: link
SDK System Permissions
The permissions required by the SDK depend on your business scenario. See the table below for details.
Android App Permissions
Permission | Purpose | Solution |
android.permission.INTERNET | Grants network access. Without this permission, the SDK will not work. | All scenarios |
android.permission.ACCESS_NETWORK_STATE | Gets the device’s network status. | All scenarios |
android.permission.CAMERA | Uses the camera for facial recognition. |
|
android.permission.RECORD_AUDIO | Records audio for intention verification. | Multifactor Intention Verification for Financial Services |
android.permission.FOREGROUND_SERVICE | Captures screen recordings to save videos of intention verification sessions. | Multifactor Intention Verification for Financial Services with video evidence enabled |
android.permission.NFC | Reads certificate information using NFC. | NFC-Based Verification for Financial Services |
iOS App Permissions
Permission | Purpose | Solution |
NSCameraUsageDescription | Uses the camera for facial recognition. |
|
NSMicrophoneUsageDescription | Records audio for intention verification. | Multifactor Intention Verification for Financial Services |
ReplayKit (dynamic permission) | Captures screen recordings to save videos of intention verification sessions. | Multifactor Intention Verification for Financial Services with video evidence enabled |
NFCScanUsageDescription | Reads certificate information using NFC. | NFC-Based Verification for Financial Services |
HarmonyOS Permissions
Permission | Description | Solution |
ohos.permission.INTERNET | Grants internet access. The SDK requires internet access to work. |
|
ohos.permission.CAMERA | Permission to access the camera. |
|
Optional Personal Information Configuration
Not collecting optional personal information may limit certain features. Configure these settings as needed for your business.
Android Configuration Method
We currently do not collect optional personal information.
iOS Configuration Method
Personal information field | Description | Configuration method |
IDFA | Identifier for advertisers | Control IDFA collection by trimming the APPSecuritySDK.framework module. For details, see SDK Package Trimming Guide. |
HarmonyOS Configuration Method
We do not currently collect optional personal information.
Extended Feature Configuration
ID Verification for Financial Services offers multiple solutions, such as ID Verification for Financial Services, Multifactor Intention Verification for Financial Services, and Liveness-Based Facial Verification for Financial Services. Choose the solution that fits your business needs. The SDK includes all features by default and supports all solutions. To use only one feature, trim the SDK package. For details, see SDK Package Trimming Guide.
SDK Initialization and Business Function Calls
When users first launch your app, call the SDK interfaces only after they agree to your app’s privacy policy and actively use an SDK feature. In identity verification scenarios, call the information collection interface (getMetaInfos) and the verification interface (verify). Avoid collecting information too early or too broadly. For details about the information collection interface, see the data collection documentation in the Development Reference.
SDK Privacy Statement, Permission Trimming, and Integration Options
Different scenarios use different SDK versions, so the required permissions vary.
For specific permission requirements, privacy considerations, and SDK package trimming instructions, see the implementation steps for each solution in the table below.
Title | Link |
ID Verification for Financial Services SDK Privacy Policy | |
Trim unnecessary permissions from the SDK package | |
ID Verification for Financial Services Solution Developer Guide | |
Multifactor Intention Verification for Financial Services Solution Developer Guide | Multifactor Intention Verification for Financial Services Solution |
Liveness-Based Facial Verification for Financial Services Solution Developer Guide | Liveness-Based Facial Verification for Financial Services Solution |
Liveness Detection for Financial Services Solution Developer Guide | |
Face Comparison for Financial Services Solution Developer Guide | |
NFC-Based Verification for Financial Services Solution Developer Guide | NFC-Based Verification for Financial Services Solution Developer Guide |