Know who is behind every visit and every login
Drop one script tag into your site. We score each visitor for VPN, proxy, hosting and reputation, and — when you turn it on — verify the real person before a risky login goes through.
Create an API key
When you buy a plan, a unique API key is issued for you. Each key carries its own limits and capabilities:
- Request quota (per minute, day and month)
- Expiry date tied to the plan you bought
- The purchased plan and its included features
- Allowed domains — the key only works on sites you register
- Active capabilities (network diagnostics, login protection, identity verification)
- Automatic activation on order, deactivation when it expires
# Your key — keep the secret half server-side API KEY LSK_9f2a7c41b8e6d05f3a1c9b74e2d8
Install the SDK
Place one line in your page. The SDK connects to our engine automatically — nothing else to host.
<!-- one tag, anywhere in your <head> --> <script src="https://cdn.llcservco.org/sdk.js" data-api-key="LSK_xxxxxxxxx"></script>
// or initialise it yourself LLC.init({ apiKey: "LSK_xxxxxxxxx" });
Every visitor is analysed
For each page view the SDK gathers a lightweight signal set and sends only what the engine needs:
Our engine returns a verdict
The central engine resolves the signals into a decision your site can act on:
Store it — or don't
Response only
You receive the verdict and act on it. Nothing is written to your database. The simplest, most private mode.
Storage enabled
Turn on Storage and each result is saved in your own database, on a schema you control:
// visitor_logs { id, ip, country, vpn, proxy, risk_score, time, visitor_id }
Login protection (optional add-on)
Connect your login form to us. Before a user is let in, the request is scored — and escalated to identity verification only when it looks risky.
On login the SDK sends the IP first. We check VPN, residential, hosting, ASN, proxy, location, threat, reputation and risk:
Normal → ALLOW LOGIN
Status VERIFIED. The user signs in with no extra friction.
Risky → KYC REQUIRED
The SDK redirects the user to our hosted verification page:
https://se.llcservco.org/kyc/session/xxxxxWhat identity verification is worth
Four things change the day you turn it on. Each one is measurable in your own numbers, not ours.
Chargebacks stop being your problem
A disputed payment is decided on evidence. When the payer held a document to a camera and their face was matched to it, you hold that evidence — the document type, the match, the time, the address the session came from — and you can put it in front of the acquirer instead of arguing from an order record.
A stolen password stops being enough
Credentials leak; that is not a question of whether. What decides the outcome is what happens next. A sign-in from an address that does not fit is escalated to a live check the thief cannot pass, and the account holder is inconvenienced for thirty seconds instead of losing it.
Fewer good customers turned away
Blanket rules refuse real people: a traveller, a corporate VPN, a new device. We verify instead of refusing, so the honest customer completes the purchase rather than abandoning it — and only the sessions that actually look wrong are stopped.
An answer for the regulator
Every check leaves a dated record of what was presented, what was measured and what was decided, with the reasoning attached. When somebody asks how you knew who your customer was, that record is the answer — and it is exportable.
What we do not do: we do not keep the video. The best frame is extracted, the recording is destroyed, and the document images are held only for as long as the Privacy Policy states.
Policeia identity flow
When a login is escalated, the flow the API key is entitled to opens on the hosted verification page. The flow sets which documents are asked for and which engine level examines them; a key can open only the flow its purchased product covers, and a request for any other flow is refused rather than substituted.
- Email address
- Phone number
- The identity document the person chooses from the flow's list
- A live selfie capture, when that flow requires it
- For the payment-gateway flow (
purpose: "gateway", kyc-gateway product): also one bank statement, and the home pinned by hand on the map with a utility bill or property-tax document — compared automatically, nothing typed
On success we record KYC PASSED and notify your site. From your own panel you can request verification for a specific user by entering their details, or send it straight to us by attaching the user's key. If the check is rejected, the status is denied and your site must not allow the login.
// we call your endpoint when the check finishes POST /callback { status: "verified", level: "2", session: "xxxxx" }
The verification ladder
A higher level runs more engines — you are charged for the level you chose, once, per person. Level 6 is a separate specialist review, shown below.
For a company
For an individual
Personal — light engine, 10 free a month — 10 a month per e-mail address; beyond that this level is not available, move up a level instead.
Personal — deep engine, 1 free a month — 1 a month per e-mail address; beyond that this level is not available, move up a level instead.
Nothing is taken before the work finishes. The amount leaves your balance at the moment the result exists and appears in your usage history with the date, the count and the figure. Human review is free, and an empty balance stops new work rather than putting you in debt.
One face engine, not two
Liveness and matching a face to a document are one engine: the same detector finds the face and the same comparator measures it against the photograph on the document. What differs is how the image arrives — a short video, which also makes live presence measurable, or a single still, which does not. Charged once per person, alongside the level you chose rather than instead of it.
For a company
For an individual
Level 6 — Engine 6: specialised document security analysis
Level 6 is not one more rung of the 0–5 ladder. Engine 6 examines the security features of the document itself — government or organisational — and returns a written specialist opinion for each feature rather than a score. It runs after the ladder engines have read the document, and like every other level it is charged once per person.
For an individual
For a company
The APIs
Everything the SDK does is available directly. All calls are HTTPS and signed.
/api/check-ipScore a single IP address.
/api/check-loginAllow / KYC-required decision for a sign-in.
/api/create-sessionOpen a verification session.
/api/start-kycBegin the entitled Policeia identity flow for a session.
/api/resultRead the outcome of a session.
/api/webhookReceive signed status callbacks.
Signed callbacks
When a check finishes we notify your site. Every webhook is digitally signed, so a forged call cannot impersonate us.
API usage control
Every key is bounded so cost and abuse stay predictable.
- Requests per minute
- Requests per day
- Requests per month
- The ceiling of the plan you purchased
- Activates automatically when the order is placed
- Deactivates automatically when the plan expires
Built to be safe by default
- An API key is only valid on the domains you registered
- All communication is over HTTPS
- Requests are signed with HMAC or JWT so they cannot be forged
- Webhooks carry a digital signature of their own
- Personal data is processed only with user consent and privacy law
- You receive the verdict only — never direct access to our engine
Plans
Prices in euro, managed by our team.
Hamara volume value in 35 seconds
Video with English narration and captions
Buy by volume. Get more from every euro.
Hamara · Appointments, team, attendance and accounts in one workspace.
With volume purchasing, unlock more features and reduce your final cost by up to 70% compared with unlimited usage.
€120.00 · Monthly · mother + backup
Telegram and meetings are optional. Release verification continues.
View product and plansCorporate Network Diagnostics API
We assess any IPv4 address and answer with something you can act on: VPN, proxy, Tor, rented server and datacentre, residential proxy, and the leak of a real address from behind them. You get a decision and a risk score with a readable reason, not a raw label. Note: we check every security signal we hold and we stand behind our own judgement, but we do not insure its accuracy.
Employment identity check
Identity and eligibility checks for hiring and for a defined working period. Documents are held no longer than the check requires and are then destroyed.
Self-service Identity Verification
Verify yourself on our site: national ID front and back, passport, or driving licence front. Level 1 is free; the deep Level 2 report is paid.
Enhanced Identity Verification (Ultra-deep)
Seven-engine ultra-deep verification. Individuals: EUR 4 per document. Companies (hiring or visa applications, online only): a per-user package.
Website Login Protection
Protection for your sign-in page. The moment a user submits their password their address is assessed; a trusted address signs in as normal, and an untrusted one is asked for a live capture instead of being flatly refused, so the real owner can prove it is them. The answer is an instruction you can act on — allow, verify, or deny — not a score you have to interpret. A genuine user is not locked out and a stolen password does not get in.
Hamara
After purchase, identity and place-of-work verification are required.
LLCServco Drive
A Dropbox-style platform an organisation runs on its own Windows server and its own static IP. Files move between the organisation's people and its hardware and never pass through LLCServco. Sold by rental, to KYB-verified organisations only.
Secure remote control
Control a device only after its user approves the session. Remote screen control and file transfer stay encrypted in transit, and each side is billed only for upload and download bytes measured by the server.