LIVE

Liveness · Face Match · Identity

Real faces get through.
Deepfakes and identity fraud don't stand a chance.

Surfmax combines liveness detection, face matching, and deepfake defense into one API, so onboarding, login, and re-verification stay fast for people and hostile to fraud.

Request a Demo

See our solutions

Built for identity teams in regulated industries

ISO/IEC 30107-3-aligned ISO/IEC 27001-aligned SOC 2-aligned NDPR-ready iBeta Level 2 PAD CEN/TS 18099:2024 IAD

Explore

Find what you need

Product

Hybrid liveness, face matching, fraud signals, and audit reporting in one API.

See the platform →

Developers

A native Android SDK via GitHub Packages, plus the integration steps to go live.

Read the docs →

Compliance

Data residency, irreversible templates, and full audit trails by design.

View compliance →

Product

One engine, four jobs

Hybrid liveness, facial matching, fraud signals, and audit reporting — all from a single verification call.

LIVENESS

Hybrid passive + active liveness

Dual on-device and cloud detection, independently tested to run with headroom inside regulatory thresholds rather than merely passing them.

Passive detection for frictionless capture, active challenge for higher-risk sessions
Built to iBeta Level 2 PAD test criteria (certification not yet completed)
Built to CEN/TS 18099:2024 IAD criteria (certification not yet completed)

FACE MATCH

Facial image matching

Live capture matched against the subscriber's identity photo, with configurable confidence thresholds per channel.

Match decision, confidence score, and threshold returned on every call
Multiple-face and eye-closure detection
Estimated age and gender captured as fraud signals

FRAUD SIGNALS

Fraud & device signals

AI-generated content detection targeting deepfakes, plus device- and network-level fraud signals.

Deepfake, GAN, and diffusion-generated media detection
3D mask, paper mask, and screen re-capture detection
Root, emulator, VPN, and geo-spoofing detection

IDENTITY FRAUD

Identity fraud prevention

Synthetic identities and stolen credentials evade static checks — Surfmax flags them before they reach onboarding.

Synthetic and stolen-identity detection across onboarding flows
Duplicate-identity and cross-channel velocity checks
Watchlist and sanctions screening on every verification

Developers

A native Android SDK for MNOs

Install the native Android SDK via GitHub Packages and configure one builder to run liveness detection, with optional facial comparison against a reference image.

01

Kickoff & sandbox access

API keys, docs, and a sandbox environment, provisioned weekly.

02

Integrate

Drop in the native Android SDK via GitHub Packages, with ProGuard rules and sample configuration included.

03

UAT & certification handover

Joint scenario testing, then a certification package for your regulator.

04

Go live

Roll out across registration, re-registration, upgrade, and swap flows.

BUILD.GRADLE

implementation 'com.surfmaxcomm:liveness_android_core:1.0-3'
implementation 'com.surfmaxcomm:liveness_android_data:1.0-3'

Android API 24+ (minSdk)
Permissions: Camera, Internet, Microphone, Storage, Phone State, Location, Vibrate
GitHub Packages credentials (read:packages scope)

Pipeline

What happens during a check

The same four-step sequence runs whether it's a new account, a step-up login, or a periodic re-verification.

01

Capture

A short selfie video or burst of frames is captured in-app — no special hardware required.

02

Liveness check

Passive signals and, where needed, an active prompt rule out photos, replays, and masks.

03

Face match

The live frame is compared 1:1 against an ID or enrollment, or searched 1:N against a watchlist.

04

Decision

A pass, fail, or review verdict returns with a confidence score and full audit trail.

Industries

Where identity assurance can't be optional

Deployed across sectors where a wrong verdict means fraud loss, regulatory exposure, or a locked-out customer.

01

Banking & fintech

Account opening, step-up auth, dispute resolution

02

Government & digital ID

Citizen portals, benefits, cross-border ID

03

Telecom

SIM registration and porting verification

04

iGaming

Age and identity checks at registration

05

Healthcare

Patient identity and remote consult access

06

Travel & mobility

Rental handover and self-service check-in

Compliance & data handling

Privacy-by-design, not privacy-as-afterthought

Biometric data carries obligations that ordinary user data doesn't. Surfmax is built so you can meet them without slowing down engineering.

Regional data residency

Store and process biometric templates in-region, with per-tenant isolation.

Irreversible templates

Match on encrypted templates, never raw images, with configurable retention and deletion.

On-prem & edge options

Run the full pipeline inside your own infrastructure when data can't leave it.

Full audit trail

Every decision is logged with the signals behind it, ready for a regulator or an internal review.

Standards referenced on this site

Where a certification is complete and independently verifiable, we say so. Where it isn't, we say that too — status here reflects what's actually confirmed, not what's in progress.

ISO/IEC 30107-3

Biometric presentation attack detection framework.

Aligned

ISO/IEC 27001

Information security management system.

Aligned

SOC 2

Security, availability & confidentiality controls.

Aligned

NDPR

Nigeria Data Protection Regulation requirements.

Ready

iBeta Level 2 PAD

Independent presentation attack detection testing.

Certified

CEN/TS 18099:2024 IAD

Injection attack detection technical specification.

Certified

Real faces get through.Deepfakes and identity fraud don't stand a chance.

Find what you need

Product

Developers

Compliance

One engine, four jobs

Hybrid passive + active liveness

Facial image matching

Fraud & device signals

Identity fraud prevention

A native Android SDK for MNOs

Kickoff & sandbox access

Integrate

UAT & certification handover

Go live

What happens during a check

Capture

Liveness check

Face match

Decision

Where identity assurance can't be optional

Banking & fintech

Government & digital ID

Telecom

iGaming

Healthcare

Travel & mobility

Privacy-by-design, not privacy-as-afterthought

Regional data residency

Irreversible templates

On-prem & edge options

Full audit trail

Standards referenced on this site

ISO/IEC 30107-3

ISO/IEC 27001

SOC 2

NDPR

iBeta Level 2 PAD

CEN/TS 18099:2024 IAD

Ready to stop synthetic identities at the door?

Real faces get through.
Deepfakes and identity fraud don't stand a chance.