AceKYC
A KYC/KYB identity-verification platform built for African markets — document OCR extraction, a multi-source waterfall verification engine, and a compliance case-review workflow, built as a Spring Boot and Next.js monorepo.
- Spring Boot 3.4
- Java 17
- PostgreSQL
- Flyway
- Redis
- AWS S3
- AWS Textract
- Resilience4j
- Next.js 15
- TypeScript
The challenge
Identity verification in African markets can't lean on a single authoritative data source the way US/EU KYC does — it needs to reconcile uploaded documents, national ID registries, credit bureaus, and mobile network data, then route low-confidence cases to human reviewers instead of silently approving or rejecting.
The approach
The backend runs a real document pipeline: uploads land in S3-compatible storage, get deskewed, contrast-enhanced, and cropped, then OCR'd via AWS Textract, with regex-based field extraction and confidence scoring per document type. A waterfall verification engine cascades checks across national database, credit bureau, and mobile network sources with weighted scoring and short-circuit thresholds, backed by a separate KYB compliance decision engine for company status, tax compliance, and regulatory screening, plus name-matching for UBO checks. Every action is written to an immutable audit log via a Spring AOP aspect, and the API layer adds JWT auth, developer API keys with OAuth2, and circuit breakers and rate limiting. The country-specific registry, bureau, and telco integrations, along with the liveness/selfie check, are explicitly mocked in code pending live provider contracts — the orchestration and scoring logic around them is real and covered by a large test suite.
What’s live
- Document OCR pipeline: image preprocessing, AWS Textract extraction, and per-field confidence scoring
- Waterfall verification engine: weighted cascade across national ID, credit bureau, and mobile network checks
- KYB compliance decision engine for business status, tax compliance, and regulatory screening
- Immutable audit logging, JWT plus API-key developer auth, circuit breakers and rate limiting
