E-KYC & DIGITAL IDENTITY VERIFICATION
e-KYC Digital Identity Verification, PSrE Certified for Customer Onboarding
Verify customer identities digitally with clear legal standing. Tilaka, a certified Certification Authority (PSrE) in Indonesia, delivers biometric e-KYC with population-data verification through API integration — supporting compliance with UU ITE, PP 71/2019, and Indonesia's Personal Data Protection Law.
Customer onboarding is where business growth meets regulatory obligation. Banks, multifinance companies, insurers, fintechs, and securities firms must know their customers thoroughly — yet face-to-face verification and paper documents leave applicants waiting for days while digital-first competitors finish in minutes. e-KYC digital identity verification resolves this dilemma: a know-your-customer process that is fast, scalable, and still legally defensible.
Not all e-KYC solutions carry equal legal weight, however. Indonesia's regulatory framework — the Electronic Information and Transactions Law (UU ITE) as amended, together with Government Regulation 71/2019 on Electronic Systems and Transactions — distinguishes certified electronic signatures created through a certified Certification Authority (PSrE) from uncertified ones. An electronic certificate issued after reliable identity verification becomes the evidentiary foundation: proof that the person transacting is genuinely the person whose identity was verified.
At the same time, e-KYC processes specific personal data — national ID numbers (NIK), facial biometrics, and civil registry documents — which Law No. 27 of 2022 on Personal Data Protection subjects to stricter safeguards. Choosing an e-KYC provider is therefore not merely a technology decision but a compliance decision: how data is verified, stored, secured, and audited. This page explains how Tilaka's PSrE-certified e-KYC helps your institution balance onboarding speed with legal certainty.
Why Conventional Onboarding and Makeshift e-KYC Are Both Risky
Manual onboarding is slow and costly
In-person verification, photocopied documents, and repeated data entry stretch customer acquisition timelines and inflate branch operating costs. Applicants who wait too long simply switch providers.
Vulnerable to identity fraud
Eyeballing an ID-card photo cannot detect forged identities, tampered documents, or presentation attacks such as photos of a screen. Failure at this gate opens the door to account takeover and money laundering.
Questionable legal validity
Digital processes without an electronic certificate from a certified CA weaken your evidentiary position when a transaction is disputed. Institutions struggle to prove who actually consented to an agreement.
Personal data protection exposure
National ID numbers and biometric data are specific personal data under Indonesia's PDP Law. Passing them to vendors without a clear processing basis, safeguards, and audit trails exposes the institution to sanctions and reputational harm.
PSrE-Certified e-KYC: Identity Verification That Is Fast and Legally Sound
Population data verification
Applicant identity data is verified against official civil registry sources, confirming that the NIK, name, and date of birth match government records — not merely reading text off a card.
Facial biometrics with liveness detection
Face matching is combined with liveness detection to defeat photo replays, recorded video, and digital manipulation at the moment of capture.
Electronic certificates from a certified CA
A verified identity is bound to an electronic certificate issued by Tilaka as a certified PSrE, so the customer's electronic signature qualifies as a certified electronic signature under UU ITE and PP 71/2019.
API and SDK integration into your apps
The entire e-KYC flow is available as APIs and SDKs embedded in your institution's mobile or web application — customers never leave your app, and your team controls the end-to-end user experience.
Audit trails and compliance support
Every verification step is recorded with a traceable audit trail, supporting internal evidentiary needs, external audits, and the risk-based AML-CFT program requirements applicable to the financial services sector.
Tilaka's certified e-KYC and electronic signature solutions are used by financial institutions and companies across regulated industries in Indonesia to digitize onboarding and document signing.
How the e-KYC Flow Works
Identity document capture
The applicant photographs their national ID card (KTP) inside your app. OCR technology automatically extracts the NIK, name, and other identity fields, eliminating manual-entry errors from the very first step.
Identity and biometric verification
Extracted data is verified against official population records, then the applicant takes a selfie with liveness detection. The system matches the face against the identity reference to confirm the applicant is the legitimate holder of that identity.
Electronic certificate issuance
Once the identity is verified, Tilaka — as a certified PSrE — issues an electronic certificate in the customer's name. This certificate binds the verified identity to every electronic signature the customer subsequently creates.
Signing and service activation
The customer electronically signs the account-opening agreement or service contract with a certified electronic signature. Onboarding completes in a single digital session, with legally signed documents and a complete audit trail.
Frequently Asked Questions
What is e-KYC and how does it differ from conventional KYC?
e-KYC (electronic Know Your Customer) performs customer due diligence electronically: capturing identity documents, verifying them against population data, and matching facial biometrics without a physical meeting. Unlike conventional KYC, which relies on in-person presence and paper documents, e-KYC completes verification in a single digital session with a more complete and consistent audit trail.
Are e-KYC results and the resulting electronic signatures legally valid in Indonesia?
UU ITE recognizes that electronic signatures have lawful legal force and effect provided certain requirements are met, and PP 71/2019 distinguishes certified electronic signatures created through a certified PSrE. Because Tilaka's e-KYC culminates in an electronic certificate issued by a certified PSrE, the customer's signatures fall into the certified category — a stronger evidentiary position if a dispute arises.
What role does a PSrE play in the e-KYC process?
A PSrE (Certification Authority) issues electronic certificates only after reliably verifying the holder's identity. Within the e-KYC flow, the PSrE is the trust anchor: its certificate binds the verified identity to the customer's electronic signature, so every signed document traces back to a verified person.
How does Tilaka's e-KYC address compliance with Indonesia's PDP Law?
The NIK, civil registry documents, and biometric data processed during e-KYC fall under categories requiring strict protection per Law No. 27 of 2022. Processing is grounded in consent and a clearly defined purpose, with technical safeguards and auditable processing records, giving your institution — as the data controller — a solid basis to account for its data flows.
How complex is integrating e-KYC into an existing application?
Integration uses REST APIs and SDKs embedded in your mobile or web application, supported by technical documentation and a sandbox environment for pre-production testing. Your team defines the user experience while verification, certificate issuance, and signing run behind the scenes through API calls.
How does e-KYC help with AML-CFT program implementation?
Anti-money-laundering regulations in the financial services sector require providers to identify and verify prospective customers using a risk-based approach. e-KYC strengthens that identification step through population-data verification, biometrics with liveness detection, and documented verification records — process evidence you can present to auditors and supervisors.
E-KYC & DIGITAL IDENTITY VERIFICATION
Accelerate Customer Onboarding with Legally Sound e-KYC
Discuss your institution's digital identity verification needs with our team. We help map your onboarding flow, API integration requirements, and compliance considerations — from sandbox trial to production.
