# Kenalyx

> Enterprise-grade KYC API, without enterprise pricing. Kenalyx provides KYC and KYB APIs for Indonesia through one HMAC-signed REST/JSON interface, billed per completed result.

Kenalyx is a private technology provider. It is not a government agency and does not claim any Dukcapil integration.

## Products
- [Identity Check](https://kenalyx.my.id/products/identity): Registered name, sex and date of birth from a 16-digit NIK. Endpoint: GET /v1/identity/check/:nik.
- [Business Check](https://kenalyx.my.id/products/business): Legal name, tax ID and OSS issuance date from a 13-digit NIB. Endpoint: GET /v1/nib/check/:nib.
- [Account Check](https://kenalyx.my.id/products/account): Holder name for 120+ banks and DANA, OVO, GoPay, ShopeePay. Endpoint: GET /v1/account/check/:bank/:number.
- [NIK Decoder](https://kenalyx.my.id/products/nik-decoder): Province, regency, district, birth date, gender and an optional age gate decoded from a NIK, with plausibility checks. Endpoint: POST /v1/identity/nik/decode.
- [Name Match](https://kenalyx.my.id/products/name-match): Indonesian-aware name comparison: titles, old spelling, Muhammad variants, initials and word order. Endpoint: POST /v1/name/match.
- [Face Match](https://kenalyx.my.id/products/face-match): Compares a selfie with the KTP portrait, after checking both images are usable. Endpoint: POST /v1/face/match.
- [Passive Liveness](https://kenalyx.my.id/products/liveness): Presentation-attack detection from a single selfie. Endpoint: POST /v1/liveness/passive.
- [KTP OCR](https://kenalyx.my.id/products/ocr): Structured identity fields from a KTP photo, with NIK consistency checks. Endpoint: POST /v1/ktp/ocr.
- [Document Check](https://kenalyx.my.id/products/document-check): Document integrity and data-consistency checks on a KTP photo, without returning personal data. Endpoint: POST /v1/ktp/authenticity.
- [Selfie with KTP](https://kenalyx.my.id/products/selfie-with-ktp): Checks a photo of the user holding their KTP against the card they uploaded. Endpoint: POST /v1/kyc/selfie-with-ktp.
- [KYC Verify](https://kenalyx.my.id/products/kyc): Selfie and KTP in — approved, review or rejected out. Endpoint: POST /v1/kyc/verify.

## Key facts
- Pricing: published per product, pay per completed result, no annual commitment; volume pricing from 1,000 verifications per month.
- Inputs: NIK is 16 digits, NIB is 13 digits, images are JPEG or PNG up to 1.5 MB.
- Security: HMAC-signed requests, replay protection, per-key scopes and rate limits, encryption at rest, audit logs.
- Privacy: selfie and KTP images are processed in memory and not stored; face embeddings are never returned.
- Access: request access on the website; the team activates a dashboard account where API keys are created.

## Docs
- [API documentation](https://kenalyx.my.id/docs)
- [Pricing](https://kenalyx.my.id/pricing)
- [Security](https://kenalyx.my.id/security)
- [Data & compliance](https://kenalyx.my.id/compliance)
- [Changelog](https://kenalyx.my.id/changelog)

## FAQ
- How does pricing work? You pay per completed result, and each product has its own price. Invalid input, rate limits, provider errors and photos rejected by the quality gate are not billed.
- Is there a minimum commitment? No annual commitment or monthly minimum on pay-as-you-go pricing. Volume pricing is available from 1,000 verifications a month.
- Can I use a single API, like Face Match only? Yes. Every API works on its own. KYC Verify combines them into one call when you want a single decision.
- How do I get access? Request access and we activate your dashboard account. You then create API keys with only the scopes you need.
- How is personal data handled? Photos are processed in memory and not stored. Face embeddings are never stored or returned. OCR values go only to the caller; our records keep a masked NIK.
- Do you offer webhooks, batch processing or a no-code option? Yes. Signed webhooks, batches of up to 1,000 checks, and a hosted verification link you can send to users without building any screens.
- Can you detect one identity behind several accounts? Yes. NIK and account checks return fraud signals for your workspace — reuse across your users, unusual velocity and your own blocklist — and verification policies can send those cases to review or reject them automatically.
- How do we handle a user’s deletion request? Call DELETE /v1/analyses/:id to redact a stored analysis, and POST /v1/risk/forget to remove their identifier from the fraud index. You can also set a retention period after which details are redacted automatically.
- Do you offer SDKs or an SLA? Not yet. The docs include working code in four languages, and SLAs are discussed in enterprise agreements.
- Are you ISO 27001 or SOC 2 certified? Not yet. Our security page lists the controls that are in place today, and what is not.

## Contact
- [Contact sales](https://kenalyx.my.id/contact?intent=sales)