What's new

Fixed

• The API now answers a clear error (422) instead of a server error when a filter value is invalid (a malformed uuid or sendEmail, or a wrong order direction), and the % and _ characters of a name search are taken literally.

Added

• A "What's new" icon in the header shows a colored dot when a release came out since your last visit, and a banner you can fold or close sums up the new features once per release.

Changed

• In the email texts, an "Available variables" panel lists the variables (first name, last name, organization) and inserts the one you click where your cursor is.
• The logo of your organization is chosen in a drop zone with a preview, and an unsuitable image is refused at once.

Changed

• You stay signed in for 8 hours without activity instead of 24 minutes.

Fixed

• The logo of your organization is displayed again on the profile page and in the list of organizations.

Added

• The background color of the emails can be customized, and the button label and the footer can be written for each language.
• The "What's new" page is also available inside your account, under Support, in your language.

Changed

• Everything about your emails is now in a single "Emails" tab: invitation, reminder (with its delay and support address), decision, notifications, brand and sender, each with its own section.
• On the email customization screens, each language now has its own tab, after a Default tab for all the other languages, instead of one block under the other.

Fixed

• The logo of your organization is no longer tiny in the emails: it is displayed in a larger box, in its own proportions.

Fixed

• The "Preview" and "Send me a test" buttons of the email customization screens work again: they showed an error instead of the email.

Added

• A public "What's new" page lists the improvements and fixes release by release, and the version of ID Check is now shown in the footer.
• Email customization goes further: preview an email and send yourself a test, choose your accent color, the label of the button and a footer, write a different subject and message for each language, and customize the reminder and the result emails like the invitation.

Changed

• The Premium plan now costs 3 per verification instead of 4. The monthly commitment is unchanged.
• The organization logo must be a PNG, JPEG, GIF or WebP image.
• The redirect address of a verification request must be a regular web or application link.
• The images and PDF files of a verification are now opened through your signed-in session: their old direct addresses no longer work.

Fixed

• Asking the API for a verification request that does not exist now answers "not found" instead of a server error.
• A late notification from the verification service no longer reopens a verification that is already approved, declined or expired.
• When HubSpot sends several events at once, all of them are now taken into account.
• A second decision on a verification (for example after a resubmission) now sends the emails, the webhooks and the HubSpot update again.
• Downloading the face image works again, and a damaged document image no longer causes an error.
• A privacy deletion request received from HubSpot now also deletes the files of the verification.

Security

• Access rights are checked more strictly across the application, and API keys and webhook secrets are only shown in full to the users who can edit them.
• Notifications to your own endpoint (webhooks) can no longer be sent to addresses on a private network.

Changed

• The help text of the invitation email screen now shows the real default subject, and the email sender screen the real default sender address.
• The HubSpot guide and FAQ now list the five optional identity properties created when the option to write identity data to HubSpot is enabled.

Fixed

• The "Change password" page no longer fails with an error.
• The text of the reminder email is optional again when reminders are enabled: a default text is used when it is left empty.

Added

• You can restrict the identity documents your contacts may use (passport, identity card, driving licence...) from the new "Accepted documents" tab. All documents stay accepted by default.
• On request, an organization can have its own verification configuration, with its own list of accepted countries and documents, enforced by the verification service itself.

Changed

• Identity data written to HubSpot is now readable: names printed in capitals on the document become "Quentin André" and the document type is written in your language ("Carte d'identité").

Fixed

• The images and PDF files of a verification are now really deleted from our storage when its retention period ends, not only its data. Files left behind by earlier versions are cleaned up automatically.
• The user menu and other interactive elements of the application work again.

Added

• Invitation email customization, on every plan: your own subject, message (with the person's name and your organization) and logo, and a reply-to address.
• Custom sender address on your own domain (for example [email protected]): add the DNS records we give you and the address is used as soon as it is confirmed.
• Optional, off by default: write the first name, last name, date of birth, document type and document country of an approved verification to the HubSpot contact.

Fixed

• The highlighted tab in the organization settings is correct again.

Security

• A front-end component with a known vulnerability was updated.

Changed

• New versions of ID Check are now put online without any interruption of service.
• Verification results that contain many images are processed faster.

Security

• Stricter browser protections (Content Security Policy) are now enforced on the application.

Fixed

• Creating a verification request through the API no longer fails with a server error.
• The API returns and accepts all the expected fields again.
• The API documentation now shows the real authentication method: your API key in the X-AUTH-TOKEN header.

Security

• An API key without any permission is now refused cleanly instead of causing an error.
• Third-party components were updated to close known vulnerabilities.

Added

• Identity verification of your customers by link or API: the person verifies on their phone or computer with an identity document and a selfie.
• Follow each verification (waiting, started, in review, approved, declined, expired), with a PDF summary, the document image and the face image.
• Automatic invitation and reminder emails to the people you ask to verify.
• Notifications to your own endpoint (webhooks) with a signature and automatic retries.
• HubSpot integration: the verification status and report are written to the contact.
• Team members, API keys and API documentation.
• Subscription plans with usage and billing, payment by direct debit and invoices.
• Verification data is automatically deleted at the end of the retention period of your plan.
• The application is available in English and French.