Release notes

🆔 IDV

Changes to IDV sessions expiration

• Sessions with Pending status will now expire after 7 days instead of 24 hours, offering users a more extended window to initiate the session hassle-free.

• Started sessions with In progress status will expire after 2 hours if no actions altering identification data are taken by the user.

• Sessions with Suspended status (set when the user opts for the "Continue later" feature) will transition to Expired status after 7 days.

  • Utilizing the "Continue later" feature will prolong the expiration period by 7 days each time it is utilized. This aligns with the email notification received by the user, indicating that the verification process can be extended for an additional 7 days.

• The expiration date will now be determined based on the modifiedUtc property of the IDV session rather than the createdUtc.

📱 Mobile SDK

Mobile SDK Android v2.5.6 update

• The Kotlin library has been updated to v1.8.0.

Important information:

This update resolves compatibility issues for clients integrating the Ondato Android SDK when they use new Kotlin version in their app. However, clients using older Kotlin versions may encounter challenges and may need to update to the newer Kotlin library version.

Updates for React and Flutter SDKs are coming soon.

🧭 Ondato OS

Open one or multiple cards functionality has now been extended to cover the following areas:

• KYB identifications

• Stoplist entries

• Client cards and monitoring events

• Business cards

• Company search (business screening)

• Company watch

• AML screening

📱 Mobile SDK

Mobile SDK iOS v2.5.6 has been released as a hotfix, featuring the following change:

• Added missing signature (issue reported on Github).

🆔 IDV

Forms API and new Form webhook events

• Three new Form webhook events have been introduced. These events will not contain form values but will provide details on the progress of form steps:

  • Form created

  • Form updated

  • Form completed

• The Forms API now includes a new object stepProgress, which holds information on the visible steps within the form, their sequence, and status (completed or not). The following Forms API endpoints are affected:

  • POST/v1/forms

  • GET/v1/forms/{id} (utilized for the webhook events)

  • PATCH/v1/forms/{id}

  • PUT/v1/forms/{id}

• For more information on Form webhook events, refer to the documentation.

🆔 IDV

IDV API

• A new optional registration data property has been introduced: nationalityCountry.

  • The following IDV API endpoints are affected:

    • POST/v1/identity-verifications

    • GET/v1/identity-verifications/{id}

    • PUT/v1/identity-verifications/{id}/registration

  • This property will also be included in IDV webhook events.

• This enhancement enables customers to provide the nationality of the user for validation, ensuring alignment with the information on the document (RegistrationDataCheck rule).

🆔 IDV

IDV Web APP

• Revised translations pertaining to the Brave browser and corrected some typos.

• Implemented a new design for the favicon.

🧭 Ondato OS | 🖥️ Ondato BO

4 new reasons for identification rejection have been introduced:

• IP from unsupported country

• Document is damaged

• Coloured ambient lighting

• High risk country

🧭 Ondato OS

You have various options to open identifications from the search page in new tabs:

• Right-click on the "View" button and choose "Open link in a new tab."

• Use Ctrl (or CMD on Apple) + left-click on the "View" button.

• Use Ctrl (or CMD on Apple) + double left-click on the identification row.

This functionality will also be implemented for other pages in the future.

🧭 Ondato OS

Added keyboard shortcuts:

• Press the ESC key to close a card.

• Navigate between cards using the ARROW KEYS.

• Use SHIFT+ENTER to comment.

• Close the edit pop-up with ESC and save changes with ENTER.

• Export AML screening results, tables, and cards to PDF by pressing SHIFT+CMD+E (SHIFT+CTRL+E for Windows).

🆔 IDV

• A confirmation dialog will now appear when closing the browser tab during the IDV process.

• The issue with changing language in the form steps has been resolved.

• In KYB, the personal code is now an optional field for representative creation.

🧭 Ondato OS | 🖥️ Ondato BO

🔐 Enhanced Security with Two-Factor Authentication (2FA) for Login

• Users of Ondato OS and BO applications now have the option to enhance their security by enabling Two-Factor Authentication (2FA) when logging in.

Important information:

• Existing users have the option to postpone the setup of 2FA until 15 Jul 2024.

• Starting from 15 Jul 2024, only newly registered users will have the flexibility to delay the setup of 2FA for 30 days.

🆔 IDV

• IDV Web APP now features a favicon and adopts the brand colour from the whitelabel configuration.

• Changing process language within the IDV Web APP will now provide a more seamless experience (only the text will be refreshed instead of reloading the entire page).

• IDV Web SDK v1.0.9 has been released.

  • Customization options enable adjustments to the transparency and blur of the background.

  • The close button is now optional, as the IDV flow already includes a close button.

• Brave browser is now partially supported.

• A new IDV status has been introduced: suspended. This status is utilized in conjunction with the continuity feature to distinguish it from other final statuses (previously used the Aborted status).

• Aborting a user session will now also terminate the KYC identification process if it was initiated (previously it would expire). This modification will be reflected in BO/OS.

• For KYB flow, the option to fill out the form will now function correctly exclusively for company managers. This modification specifically impacts Lithuanian companies.

📱 Mobile SDK

Flutter SDK v0.5.0 has been released with the following changes:

• Updated dependency of Android/iOS native SDK versions to v2.5.4 and v2.5.3 respectively.

• Resolved the issue related to error handling.

You can find the full changelog here.

📱 Mobile SDK

React Native SDK v2.5.4 has been released, featuring the updates from Android native SDK v2.5.4.

🆔 IDV

IDV Web APP

• Now, forms are equipped with a close (abort) button, just like the rest of the IDV screens. This enhancement aims to elevate the end user experience.

🧭 Ondato OS

• Screens containing a search button will now automatically refresh with new data, even if the user does not update the search parameters.

  • This enhancement in user experience eliminates the need for users to seek alternative methods.

📱 Mobile SDK

Android native SDK v2.5.4 has been released as a hotfix, featuring the following changes:

• Back action to return to the document selection screen from the document capture instructions.

• PoA (Proof of Address) document capture button action.

• Resolved issues #8, #9, and #10 reported on the GitHub project.

🆔 IDV

IDV Web APP

• Added IDV process close (abort) button to the majority of the screens in the top right corner. For forms step, this feature will be released separately. In cases where continuity is enabled, users will be given the option to utilize it instead of aborting the process.

• Released IDV Web SDK v1.0.8 to support the new close button action.

• Forms now support a Google Maps address search field with prefill for detailed fields. This functionality can also be combined with registries' full address prefill.

🧭 Ondato OS

User flow improvements

• Ondato OS invitations and password reset emails expire after 24 hours. The expiration is now handled, and the user is shown a proper message with the next step instead of "Something went wrong."

• Having multiple tabs open with different projects/accounts will now function properly: each tab can have its own project/account selected. Opening a new tab (or logging in without the specific resource in the link) will open the last used project/account.

• Opening identification (or another resource) when you are not logged in to Ondato OS will now redirect you to that resource after login.

• Opening identification (or another resource) from a different account/project will now switch to that project/account and show a notification with info in the bottom right corner. The content will match the environment.

📱 Mobile SDK Android / iOS / React Native v2.5.3 

• Fixed and updated documents with NFC flow, along with various minor improvements and bug fixes.

🆔 IDV

• IDV now offers a new feature accessible through the endpoint that allows for the deletion of all personal and/or biometric data associated with an IDV session.

  • This functionality is essential for the IDV product to manage personal data effectively and adhere to GDPR regulations. Clients now have direct control over when and what user data should be deleted in the IDV product, ensuring compliance and safeguarding privacy.

💸 AML Monitoring API

New methods:

• Legal entity batch operations (Create/Update/Delete)

  • Now, legal entity records can be managed in bulk, just like natural entity records.

• Multiple match reviews in a single request

  • It's common for a single record to have multiple matches. This method allows handling resolutions for multiple matches with a single request.

• AML Monitoring service screening status

  • This method facilitates checking service status after the last screening took place. It ensures that customers are informed about whether they are receiving new match data for the day without needing to repeat requests.

🧭 Ondato OS

• KYB representatives now have access to a new feature called "Create KYC link". This feature generates a static (non-expiring) invitation link for representatives to initiate the KYC process.

  • Users handling KYB identifications in OS can now manually re-invite KYB representatives if the automated invitation fails. This provides added flexibility in managing corner cases and saves time by eliminating the need to contact Ondato for such instances.

🆔 IDV

• Improved unsupported browser page

  • Users will see their browser name and version, along with the compatible browsers and their minimal supported versions.

  • For supported browsers, there are links provided to download/update manuals.

  • Mobile/desktop users will only see the browsers supported by their device type/OS.

• Liveness success animation was replaced with loader animation

  • Implementation is not perfect yet as its position is not completely aligned with the IDV loader, but it will reduce the confusion of the user that the process is not over.

• We've revised the Omnichannel failed connection message to provide clearer information to the end user about the issue and potential solutions.

• Changes have been made to resolve the problem of the missing selfie border in most instances.

📱 Mobile SDK

• Ondato mobile SDK native iOS, Android and React Native projects now include a folder named "Example," which contains a sample app demonstrating the implementation of the mobile SDK.

  • This app features an initial screen for entering the IDV session id to initiate the process. The Flutter SDK also includes this folder.

• Customers will have the opportunity to review an implementation example, which will facilitate the integration process on their end.

🧭 Ondato OS

Improved company/project search

• The search functionality now includes projects in addition to companies.

• It will be useful for customers with multiple accounts or numerous projects to be able to search for companies even when the project name differs significantly from the legal company name.

🖥️ Ondato BO

• Replaced Date field in identifications search screen, which referred to complete date, with Start time. This change was made to ensure correct sorting of the identifications and align the logic with Ondato OS.

• Added MRZ line fields to document section of the identification screen. The visibility of these fields depends on the MRZ valid rule (if it is enabled and relevant for the document).

🆔 IDV

 IDV Forms service

• A new API method is now available for downloading KYB and KYC forms' attachments.

  • Clients can save time by automating the extraction of form attachments, which was previously only possible manually through the OS.

🏢 KYB Monitoring API

• Batch delete endpoint has been added to remove a list of companies from the monitoring watchlist.

  • This addition aims to improve customer integration and help them in complying with data retention and management.

  • See here for updated documentation.

🆔 IDV

• Consent now includes a confirmation pop-up when declining, providing an improved user experience. This allows the user to reconsider before revoking the identification process.

• The KYC waiting screen has been enhanced with improved animation for the leaded items. This brings an improved UI and a more frictionless experience for end users.

🆔 IDV

IDV Form data prefill and Registries API

• New countries are now available for which legal entity data can be prefilled in the KYB forms. You can find the full list of countries here along with pricing information.

  • You have the option to configure the scope of prefill data, including all data, general information, shareholders, representatives, and beneficial owners.

  • Additionally, you can specify which countries' data should be prefilled. While the KYB flow may have all countries enabled to fill the form, you can set it to only prefill from specific countries.

• The Registries API provides the same data through its company-details endpoint.

🆔 IDV

• Changes have been made to the PoA (Proof of Address) document upload size. The PDF size limit has now been increased to 10MB.

• Additionally, there is no initial size limit for photos. However, if the compressed photo size exceeds 10MB, an error message will be displayed to the user.

💠 Legacy KYC | 🆔 IDV

• The new KYC UI has been enabled for all customers using the IDV.

• Omnichannel now has a handy copy link button placed below the QR code.

🆔 IDV

• Reviewed and updated back button behaviour.

• Changes related to form prefill changes:

  • The Auth signature step will now include an input for the state/registration authority of the legal entity country when the countries are US (United States), CA (Canada), DE (Germany).

  • It is now possible to separately set (from available countries) which countries' data should be prefilled in the Auth Signature step.

  • The scope of legal entity prefill can be configured based on data groups (basic, representatives, shareholders, beneficial owners).

• The Natural entity data input step can now be disabled in Auth Signature configuration.

  • This is useful in cases where only legal entity data is needed for prefills and person authentication is not required.

📱 Mobile SDK Android / iOS v2.5.2 

• iOS & Android

  • Passive liveness step completion will now load much faster.

  • Enhancements have been made to the upload of screen recordings.

  • The screen will no longer go to sleep during the liveness step.

  • The process will no longer fail if an unsupported document type is configured for the flow.

• iOS

  • The application will now fold correctly if the same session ID is reused.

  • Missing translations have been added for the "Bad media format" rejection reason.

  • Back button actions have been fixed.

  • The issue of multiple blank screens being briefly displayed between steps has been resolved.

  • Fixed the issue where users could click the start button multiple times, causing unexpected behavior.

  • Resolved the issue where identification would fail after the consent step.

• Android

  • By default, the success screen will be disabled in the SDK settings.

  • The info button actions have been fixed.

  • User logs will now be submitted correctly before the session is complete.

🆔 IDV

• New feature: language selection.

  • Users will now have the ability to choose their preferred UI language from a list of options available in the flow.

• New feature: automatic language preselection based on user's browser settings.

  • The process language will be selected based on the user's browser preferences if the language is available in the flow setup.

• Added support for Slovak language (IDV supported languages).

• Updated the unsupported browser page (documentation) to display the minimum required browser version for the process.

• Fixed an issue where users were incorrectly informed that Samsung Internet is not supported.

💠 Legacy KYC

• We have resolved the issue with the legacy KYC feature that was causing a blank page to appear after capturing a selfie on Samsung Internet.

💠 Legacy KYC | 🆔 IDV

• Increased the minimum count for audit trail images to 2.

  • If less than 2 audit trail images are being returned, then the user will be asked to repeat the step instead of being rejected and having to complete all steps again.

🧭 Ondato OS | 🖥️ Ondato BO

• Minimum length for name and surname when editing document data of the identification has been changed to 1 (previously 2).

• New log entries have been added to the client card to capture the addition or removal of monitoring sources. This change is in line with recent updates to automatic monitoring rules.

🧭 Ondato OS

Natural entity monitoring → Global rules

• AML external, AML Ondato and Document expiration monitoring sources can now be automatically added when the client card is created.

• Users still have the option to manually remove those sources, and they will be displayed in the client card as usual.

• For more information, please see here.

🧭 Ondato OS | 🖥️ Ondato BO

• In the identification screen, the document nationality and country fields now include an option called "Not specified (XXX)" instead of the previous "INTL" option. This new option is used when there is no nationality or country specified in the document.

• The identification search by country has been updated to include a "Not specified" option.

• The list of Mexico states has been updated based on information from this source.

🧭 Ondato OS

• The "UBO" section in the business screening has been renamed to "Participants".

🆔 IDV

• Fixed issue where the liveness capture screen border was occasionally missing.

🏢 KYB Monitoring API

• Fixed issue with /v1/watchlists/ endpoint not returning a list of companies if the from parameter is not provided (even though it is optional).

• Updated endpoint documentation.

📱 iOS Mobile SDK v2.5.1 hotfix

• The method of transmitting customer audit data from the iOS SDK to IDV has been modified to prevent the issue where device info and IP address info were not visible in the Backoffice/Ondato OS.

🆔 IDV

• The issue regarding the icons not displaying correctly on Firefox and Safari has been resolved.

• Additionally, UBO data can now be pre-filled in the forms.

🧭 Ondato OS

• Added a country search parameter to the AML screening (relating to the AML Screening API change).

• Fixed the issue where only one side of the driving license was available for manual identification addition - now the client can add both sides of the document.

🧭 Ondato OS

AML screening UI update

• A new section titled "Other evidences" has been added (visible when there are entries).

• This section will display all the evidence that is not associated with the fact, such as sanctions, PEP, or other relevant information.

💰 AML Screening API

• Two new parameters have been added to the natural and legal entities search endpoints: countries and countryRequired.

• These parameters provide improved filtering of results and reduce false-positive matches.

• The documentation has been updated to reflect this change.

🧭 Ondato OS

Ondato OS homepage update

• The homepage in Ondato OS has been updated and now has content for users to view.

• The updated homepage is now shown by default after login, instead of Dashboard.

🆔 IDV

• New functionality
  Data entered in the authentication step is now added to the registration data. If the customer has provided registration data and it is updated, the OriginalRegistration data object will reflect that.

• Client control
  The client can now prevent users from updating data in the authentication step. If this is done, the user will only be able to pass the process with the exact data provided by the customer (email, phone number, country, and personal code).

• Background
  This change is related to the change in the OS to display external reference ID. Registration data is visible in the OS, so this should help to make better decisions when validating identifications.

• KYC identification
  Additional rules for KYC identification can now be enabled to verify if the information provided in the authentication step matches the document data (for example, to verify that the person using Smart/Mobile ID is the same person as the one in the document).

🧭 Ondato OS

• New feature
  External reference ID is now displayed in the "Registration" section of the identification screen. The client card translations have also been updated to match this naming.

• UI improvement
  The "Add to biometric stoplist" button has been removed from the identification screen if the feature is not enabled for the client. This will clear up the UI and reduce confusion for users.

• Bug fix
  An issue that caused "Company reports" to be displayed even if the feature is not enabled has been fixed.

• Terminology change
  The "Date added" field name for company watch has been changed to "Event date". This better communicates the meaning of the field, as it refers to the date when the event actually happened, rather than when it was added to the system.

📱 Android mobile native SDK v2.5.0

• Improved security and performance
  Active liveness has been updated to improve security and performance.

• Splash screen removed
  The splash screen has been removed because it was outdated and underused.

• New flows supported
  We now support flows with only document/active liveness and flows with only one side of the document (ID card, driving license).

• New authentication flow
  We now support the IDV Face Authentication flow.

🧭 Ondato OS

• Removed client card risk scoring graph
  We have removed the client card risk scoring graph from the dashboard. This graph was not widely used, and we wanted to streamline the Dashboard to focus on the most important metrics.

• New buttons on metrics
  We have added new buttons to the metrics on the Dashboard. These buttons allow you to dive deeper and view the identifications/cards that are shown in the metric.

🆔 IDV

• Camera access page
  The camera access page has been updated with new text and a different illustration.

• Consent layout
  The consent layout has been changed to make it more user-friendly.

• Face Authentication success animation
  A new success animation has been added for Face Authentication. This replaces the static success screen.

• Active liveness update
  Active liveness has been updated to improve security and performance.

🧭 Ondato OS

Introducing the Quick menu

• This new tool is designed to simplify user navigation and save you time.

• With the Quick menu, you can conveniently perform multiple actions from a single, easily accessible location. Whether you need to conduct an AML screening, search for a company, or open a client card, the Quick menu makes it effortless to get the information you need, fast.

📱 iOS mobile native SDK v2.5.0

• Improved security and performance
  Active liveness has been updated to improve security and performance.

• Splash screen removed
  The splash screen has been removed because it was outdated and underused.

• New flows supported
  We now support flows with only document/active liveness and flows with only one side of the document (ID card, driving license).

• New authentication flow
  We now support the IDV Face Authentication flow.

🖥️ Ondato BO

Video call comments

• Now, during a video call, agents can add comments that will be visible to them during the call and to all back-office (BO) users in the identification screen after the call has ended (together with video call recording).

This new feature can be used to:

• Take notes on the customer's appearance or behaviour during the call.

• Record any relevant information that the customer provides during the call.

• Flag any potential issues that need to be followed up on after the call.

🧭 Ondato OS

New Stoplist feature functionality
We have released a new functionality for the Stoplist feature!

• New type
  We have added a new type of stoplist entry, called "Biometric".

• UI changes
  We have made some changes to the UI in the identification view, including adding knobs under Fraud checks to allow you to add identifications to the stoplist.

• Selfie to selfie validation
  We now perform selfie to selfie validation during identification. This helps to prevent fraud by ensuring that the person in the selfie is the same person as the person in the document.

• Biometric data in stoplist
  We now add both selfie and document biometric data to the stoplist for upcoming functionality, such as selfie to document photo check.

• Details button
  We have added a details button next to the biometric stoplist rule in the identification view. If there is a rule match, this button will link to the identification added to the stoplist (both in the OS and BO).