创业公司 HN:Didit (YC W26) – 身份验证领域的 Stripe
11 分•作者: rosasalberto•5 个月前
大家好,我是 Alberto。我和我的同卵双胞胎兄弟 Alejandro 共同创立了 Didit (<a href="https://didit.me">https://didit.me</a>)。我们正在构建一个统一的身份层——一个单一的集成方案,在全球范围内处理 KYC、AML、生物识别、身份验证和欺诈预防。这里有一个演示:<a href="https://www.youtube.com/watch?v=eTdcg7JCc4M&t=7s" rel="nofollow">https://www.youtube.com/watch?v=eTdcg7JCc4M&t=7s</a>。
作为同卵双胞胎,我们一生都在处理身份混淆问题,所以我们最终创建一家公司来解决互联网上的身份问题,这颇具讽刺意味。
在巴塞罗那长大后,我们花了数年时间开发产品,而身份问题是巨大的痛点。我们最终意识到,对于大多数工程团队来说,“全球身份”只是一个虚构的概念——实际上它是一个支离破碎的混乱局面。你最终需要为美国驾照拼接一个供应商,为欧洲的 NFC 芯片提取拼接另一个供应商,为 AML 筛查拼接第三个供应商,为巴西的政府数据库验证拼接第四个供应商,为低端安卓设备上的活体检测拼接第五个供应商,以及另一个用于生物识别身份验证和年龄估算的供应商。将这些整合到一个有凝聚力的流程中,同时适应 GDPR 或 CCPA 等本地法规,对于大多数团队来说都是一场毫无意义的噩梦。
当我们审视现有的“企业级”解决方案时,我们感到困惑。大多数解决方案都需要三周的销售周期才能看到一份文档。定价隐藏在“联系我们”按钮后面,而产品本身通常是臃肿的遗留系统,具有高延迟和极低的准确性。
我们还注意到一个反复出现的模式:这些工具通常只针对最新的 iOS 硬件进行了优化,在构成市场巨大份额的中端或旧款安卓设备上的表现很差。这导致了一个“泄漏”的渠道,合法用户由于技术摩擦而流失,而欺诈行为却未被发现,因为数据点分散在不同的系统中。此外,这些系统价格昂贵,通常需要大量的年度承诺,这使得早期创业公司望而却步。
我们希望构建一个对所有人开放的系统——一个像 Stripe 一样的身份验证工具,你可以在三十秒内获得一个沙盒密钥,并开始运行具有世界一流用户体验和透明定价的真实验证。
为了解决这个问题,我们采取了“妄想”的全垂直整合路径。我们没有仅仅包装现有的 API,而是构建了自己的 ID 验证和生物识别 AI 模型——从分类和欺诈检测到几乎所有语言的 OCR 模型。这种垂直整合是我们处理用户数据的根本。因为我们拥有整个技术栈,所以我们控制着敏感信息的端到端流程。你的用户数据不会通过第三方黑盒或区域中间商的链条来回传递。这使我们能够提供在仅仅是其他人 API 的编排层时无法实现的安全性。
我们认为身份验证是互联网上最关键的问题之一,必须正确且合乎道德地解决。许多人有理由持怀疑态度,尤其是在最近关于将身份变成大规模数据收集或监视工具的项目的报道之后。我们不会做任何类似的事情,但我们也不希望将来被迫这样做,因此我们促进客户方的数据最小化。与其要求全面扫描 ID,我们允许他们简单地验证一个特定属性——比如“这个人是否超过 18 岁?”——而无需查看文档本身。我们的目标是推动行业从数据囤积转向零知识,或至少是最小知识的验证。
我们的一体化方法的结果是一个提高注册率并降低身份验证成本的平台。我们专注于构建一个高置信度的自动化循环,将手动审查的需求降低多达 90%,捕捉标准视觉模型错过的复杂深度伪造和欺骗尝试。我们的 SDK 针对低带宽连接进行了优化,确保它在传统供应商通常失败的断断续续的 3G 网络上也能运行。
我们已经完全上线,你可以在
<a href="https://business.didit.me">https://business.didit.me</a> 的仪表板中立即查看工作流程编排。我们的定价是透明的,并且基于成功;我们不相信将成本隐藏在销售电话后面。
我们全天候在这里回答任何问题——无论是关于我们如何处理 NFC 验证、我们处理深度伪造检测的方法、生物识别数据保留背后的总体伦理,还是我们对身份未来的看法。我们很乐意听取您对我们的 API、平台和集成流程的严厉反馈!
查看原文
Hi HN, I’m Alberto. I co-founded Didit (<a href="https://didit.me">https://didit.me</a>) with my identical twin brother Alejandro. We are building a unified identity layer—a single integration that handles KYC, AML, biometrics, authentication, and fraud prevention globally. Here’s a demo: <a href="https://www.youtube.com/watch?v=eTdcg7JCc4M&t=7s" rel="nofollow">https://www.youtube.com/watch?v=eTdcg7JCc4M&t=7s</a>.<p>Being identical twins, we’ve spent our whole lives dealing with identity confusion, so it is a bit of irony that we ended up building a company to solve it for the internet.<p>Growing up in Barcelona, we spent years working on products where identity issues were a massive pain. We eventually realized that for most engineering teams, "global identity" is a fiction—in reality it is a fragmented mess. You end up stitching together one provider for US driver's licenses, another for NFC chip extraction in Europe, a third for AML screening, a fourth for government database validation in Brazil, a fifth for liveness detection on low-end Android devices, and yet another for biometric authentication and age estimation. Orchestrating these into a cohesive flow while adapting to localized regulations like GDPR or CCPA is a nightmare that makes no sense for most teams to be working on.<p>When we looked at the existing "enterprise" solutions, we were baffled. Most require a three-week sales cycle just to see a single page of documentation. Pricing is hidden behind "Contact Us" buttons, and the products themselves are often bloated legacy systems with high latency and abysmal accuracy.<p>We also noticed a recurring pattern: these tools are frequently optimized only for the latest iOS hardware, performing poorly on the mid-range or older Android devices that make up a huge percentage of the market. This results in a "leaky" funnel where legitimate users drop off due to technical friction and fraud goes undetected because data points are spread across disparate systems. Also, these systems are expensive, often requiring massive annual commits that price out early-stage startups.<p>We wanted to build a system that is accessible to everyone—a tool that works like Stripe for identity, where you can get a sandbox key in thirty seconds and start running real verifications with world-class UX and transparent pricing.<p>To solve this, we took the "delusional" path of full vertical integration. Rather than just wrapping existing APIs, we built our own ID verification and biometric AI models—from classification and fraud detection to OCR models for almost every language. This vertical integration is fundamental to how we handle user data. Because we own the entire stack, we control the flow of sensitive information from end-to-end. Your users' data doesn't get bounced around through a chain of third-party black boxes or regional middle-men. This allows us to provide a level of security and privacy that is impossible when you are just an orchestration layer for other people's APIs.<p>We believe that identity verification is one of the most critical problems on the internet, and must be solved correctly and ethically. Many people are rightfully skeptical, especially given recent news about projects that have turned identity into a tool for mass data collection or surveillance. We don’t do anything of the sort, but we also don’t want to be coerced in the future, so we facilitate data minimization on the customer side. Instead of a business asking for a full ID scan, we allow them to simply verify a specific attribute—like "is this person over 18?"—without ever seeing the document itself. Our goal is to move the industry away from data hoarding and toward zero knowledge, or at least minimal knowledge, verification.<p>The result of our all-in-one approach is a platform that increases onboarding rates while lowering identity costs. We’ve focused on building a high-confidence automated loop that reduces the need for manual review by up to 90%, catching sophisticated deepfakes and spoofing attempts that standard vision models miss. Our SDK is optimized for low bandwidth connections, ensuring it works on spotty 3G networks where legacy providers usually fail.<p>We are fully live, and you can jump into the dashboard at
<a href="https://business.didit.me">https://business.didit.me</a> to see the workflow orchestration immediately. Our pricing is transparent and success-based; we don’t believe in hiding costs behind a sales call.<p>We’re here all day to answer any question—whether it’s about how we handle NFC verification, our approach to deepfake detection, the general ethics behind biometric data retention, or how we think about the future of identity. We’d love your brutal HN feedback on our APIs, platform, and integration flow!