هوية — Huwiyya
هويةHuwiyya
Partner Portal
Banking-Grade Identity Verification · Self-Hosted AI · Syria

هوية

Huwiyya

Identity Verification Platform for Syrian Banking

Self-Hosted AI · Full RTL Support · Banking-Grade Audit Trail

Secure Platform
Audit Evidence Retention
AI Document Recognition
Liveness Detection
Syrian ID & Passport
Partner API & Webhooks
International Sanctions Screening
OAuth 2.0 mTLS (RFC 8705)
MFA / TOTP Authentication
How It Works

Partner-Triggered Verification

Every verification starts with a partner request and ends with a fully audited decision

01
Partner Triggers Verification
A bank or partner initiates via the REST API or incoming webhook, creating an auditable verification case.
02
Secure Session Issued
Platform creates a one-time session link sent to the end user via the partner's channel.
03
Mobile Capture Flow
User opens the mobile app for guided document photo, selfie, and liveness video capture.
04
Self-Hosted AI Checks
OCR, face match, liveness, fraud signals — all processed on your infrastructure, no external cloud.
05
Result & Audit Stored
Final decision delivered to partner via API and webhook. Full evidence and audit trail stored securely.
1
Partner Triggers Verification
•••
2
Secure Session Issued
•••
3
Mobile Capture Flow
•••
4
Self-Hosted AI Checks
AI
5
Result & Audit Stored
Features

Platform Capabilities

Everything you need to verify customer identity to the highest banking standards

Syrian National ID

AI-assisted document verification with OCR extraction, tamper detection, and field validation for Syrian National ID cards.

Syrian Passport

Full MRZ parsing, passive authentication checks, and structured field extraction for Syrian passports.

OAuth 2.0 mTLS (RFC 8705)

Partners authenticate using certificate-bound OAuth 2.0 access tokens. Mutual TLS ensures proof-of-possession on every API request.

AI Document Classification

Automatic classification of Syrian ID vs Passport using self-hosted computer vision models.

OCR & Field Extraction

AI-enhanced OCR with confidence scoring and structured extraction of document fields.

Face Matching

Biometric comparison between document portrait and live selfie using self-hosted face recognition.

Liveness Detection

Passive and active liveness checks with presentation attack detection to prevent spoofing.

Audit Trail

Every action, AI score, and state change is immutably logged with actor identity and timestamp.

Partner API & Webhooks

REST API with idempotency, HMAC-signed outbound webhooks, retry queues, and delivery history.

Multilingual & RTL

Arabic-default with full RTL support. Also supports English, German, Turkish, and Kurdish.

Admin & Partner Dashboards

Purpose-built operational consoles for admins, reviewers, and partner integration teams.

Risk Flags & Manual Review

Low-confidence cases automatically escalate to reviewer queues with full AI context visible.

Compliance-Ready Reporting

Configurable retention, legal hold, evidence export, and policy versioning for regulators.

Sanctions Screening

Automated screening against OFAC SDN, EU Consolidated, UN Security Council, and UK HMT sanctions lists with Arabic name transliteration.

GPS Evidence Tracking

Capture GPS coordinates from mobile devices during evidence upload. Location data stored with all documents, selfies, and videos for forensic audit.

Multi-Factor Authentication

TOTP-based MFA with QR enrollment for admin and partner accounts. AES-256-GCM encrypted secrets with ±1 drift tolerance.

OCR Field Correction

Authorized users can manually correct AI-extracted document fields. Every correction is fully audited with before/after state capture.

Process

Five Steps to Verified

A clear, auditable pipeline from partner request to final outcome

01

Partner Triggers

API call or webhook event creates a new verification case with idempotency support.

02

Session Issued

Platform generates a secure one-time verification session link for the subject.

03

Mobile Capture

Guided document, selfie, and liveness capture with on-device quality pre-checks.

04

AI Verification

Self-hosted OCR, classification, face match, liveness, and fraud analysis pipeline.

05

Result Delivered

Approved or escalated. Result sent to partner. Full evidence chain preserved for audit.

Security

Built for Regulated Environments

Every control designed for banking-grade compliance and defensible audit trails

Security is not a feature — it is the foundation. Legal review is recommended before production deployment.

Encryption at Rest & Transit
All evidence encrypted at rest. TLS in transit. No unencrypted biometric data at any layer.
Configurable Retention
Per-tenant retention schedules, legal hold, and policy-driven deletion with full audit log.
Role-Based Access Control
Super Admin, Reviewer, and Partner roles strictly separated. Tenant data never mixed.
Tamper-Evident Audit Logs
Every login, action, and AI decision is logged with actor identity and timestamp.
Human Review Fallback
Low-confidence or flagged cases always route to a human reviewer — no blind auto-approvals.
Self-Hosted AI Inference
No biometric data, evidence, or embeddings sent to external AI providers.
OAuth 2.0 mTLS Authentication
Partners authenticate via certificate-bound access tokens per RFC 8705. Token + certificate thumbprint validated on every request.
Multi-Factor Authentication
TOTP-based MFA for admin and partner accounts. AES-256-GCM encrypted secrets with QR enrollment flow.
Platform

Purpose-Built for Banking Operations

Designed for compliance officers, case reviewers, and partner integration teams

huwiyya.syria-cloud.sy
ه
هوية
Admin Console
Jan – MarO
1,247+12%
Verified
38−4
Pending
12+2
Review
8+1
Partners
Verifications · this week492
MTWTFSS
AVRF-8821Syrian IDApproved
SVRF-8822PassportReview
OVRF-8823Syrian IDRunning
Super Admin Dashboard
Global verification oversight, KPIs, and queue management
huwiyya.syria-cloud.sy
Damascus Bank
Partner Portal
LIVE
432
Total+18
389
Approved+15
11
Pending−3
Conversion · 7 days92%
AAhmad K.Syrian IDApproved
SSara M.PassportPending
OOmar H.Syrian IDApproved
Partner Portal
Case tracking, API credentials, and webhook management
huwiyya.syria-cloud.sy
A
Ahmad Khalil
VRF-8821 · Syrian ID
APPROVED
Document
Syrian ID
Face Match
97.3%
Liveness
Passed
Sanctions
Clear
97SCORE
AI Confidence97%
Fraud RiskLow · 4%
Decision byRReviewer · 2m ago
Verification Detail
Full case view with AI scores, evidence, and audit timeline
huwiyya.syria-cloud.sy
9:41
Document Capture
FrontBackSelfieVideo
Focus
Glare
Framing
Lighting
Mobile Capture Flow
Guided document, selfie, and liveness capture with quality checks
AI Engine

AI-Assisted, Human-Accountable

Self-hosted AI inference for every verification step — with full auditability and human oversight

Self-Hosted AI · No External Cloud APIs
Document Classification
OCR Enhancement
Structured Field Extraction
Fraud Signal Detection
Face Matching
Liveness Detection
Sanctions Screening

All AI outputs are stored with model version, confidence score, and inference timestamp. Low-confidence or policy-flagged cases always route to manual review. AI thresholds are configurable and treated as policy changes.

Use Cases

Built for Regulated Financial Services

Commercial Banks
Fintech Platforms
Digital Onboarding
Regulated Financial Services
High-Risk Account Opening
Portals

Two Portals, One Platform

Super Admin

Super Admin Portal

Global tenant management, compliance policy configuration, manual review queues, evidence access, audit trail search, webhook delivery logs, and retention settings.

  • Partner onboarding & management
  • Verification case oversight
  • AI threshold & policy tuning
  • Audit log export
  • Retention & legal hold
Open Admin Portal →
Partner Portal

Partner Portal

Create and track verification requests, manage API credentials and webhook endpoints, review verification outcomes, export reports, and view partner-scoped audit logs.

  • Create verification requests
  • Live case status tracking
  • Webhook endpoint management
  • OAuth client & API credential management
  • Evidence access (policy-gated)
Open Partner Portal →
Get Started

Ready to Integrate?

Built for Syrian banking operations. Contact your integration team to begin.

2
Document Types Supported
5
Languages
11
Verification States
5
Self-Hosted AI Services
100%
Self-Hosted AI