TILAKA — DIGITAL IDENTITY & ELECTRONIC SIGNATURE
Digital Identity for Banking: e-KYC and Certified Electronic Signatures for Customer Onboarding
Tilaka helps banks and financial institutions verify customer identities digitally and sign documents with certified electronic signatures issued through a government-recognized Certification Authority (PSrE). Faster onboarding, legal validity under Indonesia's ITE Law, and personal data processing aligned with the PDP Law.
Digital identity has become the foundation of modern banking in Indonesia. Customers expect to open accounts, apply for loans, and sign agreements entirely from their phones — without visiting a branch. Yet behind that seamless experience, banks remain obligated to ensure the person on the other side of the screen is genuinely the rightful owner of the identity, and that every electronically signed document can withstand legal scrutiny.
The regulatory framework is already in place. Indonesia's ITE Law and its amendments recognize that electronic signatures carry lawful legal force and effect when specific requirements are met, and Government Regulation 71/2019 distinguishes certified electronic signatures — created with an electronic certificate from an Indonesian Certification Authority (PSrE) — from uncertified ones. Meanwhile, OJK's AML/CFT provisions demand reliable Customer Due Diligence, including when verification is performed electronically, and the Personal Data Protection Law No. 27 of 2022 imposes strict obligations on processing personal data, classifying biometric data as specific personal data.
The challenge for banks is uniting all of this into a single digital onboarding flow that is fast, secure, and auditable: biometric identity verification against the official civil registry, issuance of a trusted digital identity, document signing with strong evidentiary weight, and a complete audit trail. Tilaka, a digital identity and electronic signature platform anchored to a certified PSrE, is built to answer that need end to end.
Customer Verification and Digital Document Challenges in Banking
Slow, costly manual onboarding
Face-to-face requirements, photocopied documents, and wet signatures stretch out account opening and loan disbursement timelines. Branch and back-office operating costs grow with every new customer.
Identity fraud and document forgery risk
Identity theft, forged ID cards, and manipulated photos or videos (including presentation attacks and deepfakes) target digital channels. Without strong biometric verification and liveness detection, banks carry both financial loss and compliance exposure.
Questionable legal standing of electronic documents
A drawn scribble or a consent checkbox is difficult to authenticate when a credit dispute or repudiation arises. Without an electronic certificate from a Certification Authority, the bank's evidentiary position weakens considerably.
Data protection and audit compliance burden
The PDP Law requires a lawful basis for processing, adequate safeguards, and accountability over customer personal data — including biometrics. Banks must also be ready to show regulators and auditors a complete trail of every e-KYC check and signing event.
Tilaka's Digital Identity and Certified E-Signature Solution
e-KYC with biometric verification and liveness detection
Customer identities are verified through demographic and facial biometric matching against the official civil registry (Ditjen Dukcapil), reinforced by liveness detection to defeat photos, replayed videos, and presentation attacks.
Digital identity backed by a PSrE electronic certificate
Once verification succeeds, the customer receives an electronic certificate issued through a certified PSrE recognized by Indonesia's Ministry of Communication and Digital Affairs. This digital identity underpins every certified electronic signature.
Certified electronic signatures with legal force
Account opening documents, credit agreements, and other forms are signed with certified electronic signatures consistent with the ITE Law and GR 71/2019 — binding the signer to the document and revealing any alteration made after signing.
API/SDK integration into the bank's onboarding channels
Tilaka is delivered as APIs and SDKs that embed into mobile banking apps, web portals, and loan origination systems, so e-KYC and signing run seamlessly inside the bank's own channels.
Data security and compliance readiness
Personal data processing is designed to align with the PDP Law: consent-based collection, encryption in transit and at rest, and a complete audit trail for every verification and signing event as evidence of accountability.
The Tilaka platform is used by financial institutions and enterprises across Indonesia to digitize identity verification and electronic document signing.
How It Works: From Identity Verification to Signed Documents
Customer submits ID and a selfie
Through the bank's app or web channel, the customer photographs their national ID card and takes a selfie with liveness detection. Data is collected with explicit consent as the lawful processing basis under the PDP Law.
e-KYC verification against official records
The system matches the customer's demographic data and facial biometrics against the official civil registry. Verification results are returned to the bank's systems in real time to support the Customer Due Diligence process.
Certificate issuance and document signing
After the identity is verified, an electronic certificate is issued in the customer's name through the certified PSrE. The customer then signs documents — account opening forms, credit agreements, or other paperwork — with a certified electronic signature.
Audit trail and document verification
Every step is recorded in an audit trail: timestamps, verification outcomes, and signing evidence. Signed documents can be authenticated at any time, supporting internal audit, external auditors, and legal evidentiary needs.
Frequently Asked Questions
Are electronic signatures legally valid for banking documents such as credit agreements?
Yes. Indonesia's ITE Law recognizes electronic signatures as having lawful legal force and effect when they meet defined requirements — among them, that the signature creation data is linked to and controlled solely by the signer, and that any post-signing alteration is detectable. Certified electronic signatures created with a PSrE-issued electronic certificate satisfy those requirements technically, which is why they are widely used for credit agreements and other banking documents. Deeds that regulation requires in a specific form (for example, notarial deeds) should still follow the applicable rules.
What is the difference between certified and uncertified electronic signatures?
Government Regulation 71/2019 distinguishes the two: a certified electronic signature is created using the services of an Indonesian Certification Authority (PSrE) and evidenced by an electronic certificate, while an uncertified one is created without them — for example, a signature image pasted onto a document. Both are recognized, but certified signatures provide far stronger assurance of the signer's identity and the document's integrity, improving the bank's evidentiary position in a dispute or repudiation.
How does Tilaka's e-KYC support Customer Due Diligence and AML/CFT obligations?
AML/CFT provisions in the financial services sector require banks to identify and verify prospective customers, and verification may be performed electronically using civil registry data. Tilaka's e-KYC matches demographic data and facial biometrics against the official civil registry with liveness detection, then delivers the verification result and its audit trail to the bank's systems. The final decision to accept a customer remains with the bank's own policy and risk assessment.
How is customer personal data protected, including biometric data?
The PDP Law No. 27 of 2022 classifies biometric data as specific personal data that demands heightened protection. Tilaka's flows are designed around a clear lawful basis (including the customer's explicit consent), encryption of data in transit and at rest, access restrictions, and processing activity records. The bank, as data controller, retains policy control, and Tilaka supports that accountability with documentation and audit trails.
How complex is integrating Tilaka with an existing mobile banking app or origination system?
Integration is done through REST APIs and SDKs with technical documentation and a sandbox environment for development and testing. Banks can start with a single flow — such as online account opening — then expand to loan applications, data updates, and internal document signing. Our technical team assists from flow design through go-live.
Which documents can be signed electronically, and how are they verified later?
In general, all civil banking documents can be signed electronically: account opening forms, credit agreements, addendums, powers of attorney, and internal documents. A signed document embeds the electronic certificate, so the signer's authenticity and the content's integrity can be verified at any time — for instance, through PDF readers that support digital signature validation or available verification services. This gives banks strong evidence for audits and legal proceedings.
TILAKA — DIGITAL IDENTITY & ELECTRONIC SIGNATURE
Accelerate Customer Onboarding with Legally Valid Digital Identity
Discuss your bank's e-KYC and certified electronic signature needs with the DTI team. We help you design a digital onboarding flow that is fast, secure, and aligned with Indonesian regulation.
