One API for identity verification, credit intelligence, biometrics and fraud screening. Attesta routes every check to the best data partner for that country and returns one clear answer in seconds.
Efua Boateng
Ghana Card · name, DOB, phone
Six product areas, one contract. Mix them freely — every call shares the same request shape, the same response envelope and the same audit trail.
Confirm government IDs in real time. Ghana Card, BVN, NIN, passports and national IDs across 11 countries, with name and date-of-birth match scoring on every result.
Scores, bureau summaries, repayment history and an affordability verdict — Ghana via the national credit bureau, Nigeria via all three bureaus.
Sanctions, PEP and adverse-media screening plus phone, email and IP risk signals in a single call.
Liveness, selfie-to-ID matching and document OCR for passports, licences, utility bills and incorporation papers.
CAC, TIN and registry look-ups, business AML and premises verification — bundled into one KYB dossier.
Drop-in hosted verification flows for web and mobile, OTP and transactional SMS, and address verification — so you can launch without building a single screen.
Add a product later without touching your app — the request shape never changes.
Explore the APIEleven countries where we query the national registry itself, and sanctions, PEP and adverse-media screening that reaches more than two hundred jurisdictions. One request shape for all of it.
Seen enough? Sandbox keys in a minute.
Test identities, realistic responses, the same prices as live. No call, no contract, no card.
69 capabilities across twelve families — 65 of them a single API call, the rest built on top in the console. Add one later without touching your app: the request shape never changes.
Look someone up in the registry that issued their document, and score what they told you against what it says.
Bureau scores with the band and the reasoning, the full account picture, and whether the facility is affordable.
Global sanctions, politically exposed persons and adverse media — for people and for companies.
One risk score across the signals that actually move — email age, phone, IP, device and watch-lists.
Prove the person is real, present, and the same one on the document.
Read a document, check it is genuine and unexpired, and pull the fields out of it.
Company registries, tax IDs and directors, bundled into one dossier on the entity.
Bank statements read into income and affordability, and account ownership confirmed before you pay out.
Confirm where someone actually lives or trades — digitally, or with an agent on the doorstep.
A branded journey you send as a link — ID, document, selfie, liveness, OTP, address, proof of address.
Candidate declarations matched against every source, with analyst findings recorded alongside.
Your policy, versioned, applied to the facts — with the reason every rule fired written down.
Predictable REST, typed SDKs, a sandbox with realistic fixtures, and webhooks for anything asynchronous. Idempotency keys mean a retry never bills you twice.
# Credit score, routed automatically curl https://api.attesta.africa/v1/credit/score \ -H "Authorization: Bearer sk_live_…" \ -H "Idempotency-Key: 7d2f…" \ -d '{ "source": "auto", "identifier": { "type": "ghana_card", "value": "GHA-000000000-2" }, "purpose": "PERSONAL_LOAN", "consentReference": "cons_8f2a" }'
{
"score": 682, "min": 300, "max": 850,
"band": "VERY_GOOD",
"meta": { "source": "credit_bureau", "sourceRequestId": "req_91ab", "asOf": "2026-08-24" }
}See each verification, who requested it, which source answered and what it cost. Set routing policy, manage keys and webhooks, and export audit trails — without writing code.
Change defaults and fallbacks per product from the dashboard. Effective immediately.
Every credit pull stores the permissible purpose and consent reference for regulators.
Analysts, developers and finance see what they need — and every view is logged.
Collect a Ghana Card, BVN or NIN — through your own screens or our hosted flow — along with the customer's consent.
Identity, credit, affordability, fraud. One call each, or one bundle. Attesta routes to the best source and normalises the answer.
Apply your own rules in our decision engine, or take the raw facts into yours. Either way, the full trail is on record.
Designed around Ghana's Data Protection Act and Credit Reporting Act and Nigeria's NDPR. Personal data is encrypted, masked in logs and retained only as long as your policy says.
Send a candidate their declaration form. We match every answer against the registries, run the watchlists, and give your analyst somewhere to record the parts no API sells — then put all of it in one report.
Who they are, how they handle money, and the three references every hiring or lending desk asks for.
Everything in Basic, plus international screening, the full credit picture, in-person due diligence and a detailed report.
Every automated result and every recorded finding lands in the same branded PDF, with a case number on each page and the rule that produced the outcome written out in full.
Fund a wallet, run checks, see the cost of every call by source. Volume tiers kick in automatically.
Integrate against realistic test data, priced exactly as live — so what you spend building is what the flow will cost.
Live data from licensed identity and credit partners, priced per product and per source.
For lenders and banks running tens of thousands of checks a month.
The things worth knowing before you write any code — costs, data handling, what happens when a check fails. If something here is still vague, ask us and we will make it specific.
Sandbox keys are issued the moment you sign up, and every check is a single POST that returns one normalised answer. Most teams have identity verification running the same afternoon. A full lending flow — identity, credit, affordability and a decision — is usually a few days, most of it spent on your own rules rather than on us.
Yes, and without a card. The sandbox mirrors live exactly: same request, same response shape, same prices shown against every check, so nothing you build has to change when you switch. It ships with test people who fail in specific ways — a clean applicant, a thin credit file, one in arrears with a judgement debt, one who trips a watch list — so you can build the unhappy paths before you meet them.
A prepaid wallet, charged per check, in your own currency — cedis for Ghana, dollars elsewhere. No monthly minimum, no per-seat fee, no annual commitment. Every response carries the cost of that check and every charge lands on the statement against the run that caused it, so the bill reconciles to the work.
You are not charged for it. A check is billed only when a source actually answers, so a timeout, an outage or a registry that is down costs you nothing. If a source is slow or unavailable we try an alternative that can answer the same question before giving up, and the response tells you how many attempts it took.
Keep as little of it as the job allows. Selfies and document images are deleted within 24 hours of the check, bank statements within 30 days, and raw upstream payloads within 90. What remains is the normalised result you paid for. Identifiers, results, declarations and uploaded documents are encrypted at rest, so a copy of the database taken without the application is not a readable file of anybody’s identity.
Every credit check refuses to run without a permissible purpose and a consent reference, and both are stored alongside the result. Every action in the console is written to an audit log that records who did it, when, and from where — and the log is hash-chained, so an entry altered after the fact can be detected rather than merely trusted. All of it exports.
Yes. Five roles: owner, admin, developer, analyst and finance. An analyst can run and read checks but never touches API keys or the wallet; finance sees money and not identity data; developers hold keys and webhooks. Every view is logged either way.
Only if you want to. Hosted verification flows give you a branded journey — document capture, liveness, the lot — behind a single link you send or embed, with the result arriving in your dashboard and on your webhook. If you would rather own the interface, every step is available as an API call instead.
You get the degree of the match and the reason for it, not a verdict we invented on your behalf. A missing middle name is reported as a missing middle name, a transposed first and last name is reported as transposed, and where a document was checked against a registry we tell you which fields agreed and which did not. What counts as good enough is a threshold you set, because it differs between opening a wallet and approving a loan.
Ghana and Nigeria in full — identity, credit, fraud and messaging. Identity verification also covers Kenya, Uganda, South Africa, Zambia, Zimbabwe, Angola, the United Kingdom and Canada. Credit data is available for Ghana, Nigeria and Zimbabwe. The coverage page lists exactly which checks are live in each.
Keys are scoped to the products they may call, can be pinned to a set of IP addresses, and rotate with a grace period so you are never forced into a flag-day cutover. Sandbox and live are separate keys against separate wallets and separate data. Outbound webhooks are signed and timestamped so you can verify a delivery came from us and is not a replay.
The status page shows every source’s health in real time, and the dashboard shows the same for your own traffic — latency, failures and which checks are affected. Failures are visible in your verification list with the error and the attempts, not buried. Support is email and shared channel, and we answer.
Get sandbox keys in minutes, or talk to us about volume pricing, bring-your-own credentials and data residency.
