Trulioo API
Trulioo is software that verifies identities and businesses worldwide. With an unofficial API, you can submit person and company details for verification, run sanctions/PEP watchlist screening, validate documents and addresses, discover beneficial owners, and retrieve machine-readable results and au
What is Trulioo?
Trulioo is a RegTech provider focused on global identity verification and business due diligence. Its platform powers KYC (person verification), KYB (business verification and UBO discovery), AML watchlist screening (sanctions and PEP), document verification, and proof-of-address checks across hundreds of countries and data sources.
Core product families include:
- Person Verification (identity, address, document checks)
- Business Verification (registry matching, KYB profiles, UBO discovery)
- AML Watchlist Screening (sanctions, PEP, enforcement lists)
- Compliance Evidence (reports, source metadata, audit artifacts)
Common data entities:
- Persons and businesses (applicants, organizations)
- Verification requests and results (KYC/KYB)
- Watchlist hits (sanctions, PEP)
- Registry records, directors, beneficial owners (UBOs)
- Documents and images (passports, national IDs, certificates)
- Reports and audit artifacts (machine-readable summaries, PDFs)
The Trulioo Integration Challenge
Organizations rely on Trulioo daily, but turning portal-centric workflows into automated pipelines is challenging:
- Product entitlements and geography: Access varies by country data sources and verification types (KYC, KYB, watchlists, document checks)
- Enterprise security controls: SSO, MFA, and network restrictions complicate headless automation
- Portal-first experiences: Key capabilities live in the web app; public APIs or account configurations may be limited
- Consent and evidence: Capturing consent timestamps, storing document images, and generating audit artifacts requires careful orchestration
- Data normalization: Results differ by source and country; downstream systems need consistent schemas
How Supergood Creates Trulioo APIs
Supergood reverse-engineers authenticated browser flows and network interactions to deliver a resilient API endpoint layer for your Trulioo workflows.
- Handles username/password, SSO/OAuth, and MFA (SMS, email, TOTP) securely
- Maintains session continuity with automated refresh and change detection
- Normalizes responses so you can integrate once and rely on consistent objects across capabilities
- Aligns with customer entitlements, data-source licensing, and country coverage to ensure compliant access
Getting Started
- Schedule Integration Assessment
Book a 30-minute session to confirm your product mix, licensing, country coverage, and authentication model.
- Supergood Builds and Validates Your API
We deliver a hardened Trulioo adapter tailored to your workflows and entitlements.
- Deploy with Monitoring
Go live with continuous monitoring and automatic adjustments as Trulioo evolves.
API Endpoints
Authentication
/auth/sessionsEstablish a session using credentials. Supergood manages MFA (SMS, email, TOTP) and SSO/OAuth when enabled. Returns a short-lived auth token maintained by the platform.
Person Verification (KYC)
/verifications/personRun a person verification, including identity, address, document checks, and watchlist screening. Optionally attach document images.
Business Verification (KYB)
/verifications/businessRun a business verification against registries, with optional UBO discovery and watchlist screening of principals.
Results
/verifications/{verificationId}/resultsRetrieve normalized results for a completed KYC/KYB verification, including data source matches, watchlist hits, UBOs, and evidence links.
Use Cases
Automated Person KYC
- Trigger identity, address, and document checks during onboarding - Retrieve match results, document validation outcomes, and watchlist hits with normalized risk summaries - Route outcomes to approval, review, or decline queues with audit artifacts
KYB and UBO Discovery
- Verify businesses against official registries - Discover and validate directors and beneficial owners - Screen entities and principals against sanctions/PEP lists
AML Watchlist Screening
- Screen persons or businesses for sanctions and PEP exposure - Configure risk thresholds and match strategies - Centralize hits and evidence for case management
Compliance Archival and Audit Trails
- Export verification packets with source-level metadata - Timestamp consent and results for regulatory retention - Provide machine-readable evidence across KYC/KYB checks
Technical Specifications
Authentication
Username/password with MFA (SMS, email, TOTP) and SSO/OAuth where enabled; supports service accounts or customer-managed credentials
Response format
JSON with consistent resource schemas and pagination
Rate limits
Tuned for enterprise throughput while honoring licensing, data-source quotas, and usage controls
Session management
Automatic reauth and cookie/session rotation with health checks
Data freshness
Near real-time retrieval of verification outcomes, watchlist hits, and generated reports
Security
Encrypted transport, scoped tokens, and audit logging; respects Trulioo entitlements and regional restrictions
Webhooks
Optional asynchronous delivery for long-running KYC/KYB verifications and watchlist alerts
Latency
Sub-second responses for list/detail queries under normal load
Throughput
Designed for high-volume onboarding and batch verification pipelines
Reliability
Retry logic, backoff, and idempotency keys minimize duplicate actions
Adaptation
Continuous monitoring for UI/API changes with rapid adapter updates
Frequently asked questions
Supergood supports workflows across person verification (KYC), business verification (KYB and UBO discovery), AML watchlist screening, and document verification, subject to your licensing and entitlements. We scope coverage during integration assessment.
We support username/password + MFA (SMS, email, TOTP) and can operate behind SSO/OAuth when enabled. Sessions are refreshed automatically with secure challenge handling.
Yes. You can submit document images for validation and include address checks. Results return match confidence, document type and expiry, and source metadata suitable for audit.
Yes. KYB flows can include registry lookups, director and UBO discovery, and watchlist screening of principals. Outputs are normalized for downstream case systems.
Requests include consent method and timestamp. We return machine-readable artifacts and report URLs so you can maintain audit trails and meet retention requirements.