Regulatory Compliance · Age Verification
Age verification.
Zero data.
Fully compliant.
New youth protection laws in Austria, Germany and the EU force platforms to verify user age. Our B2B API does exactly that — without storing a single byte of personal data.
Personal data stored
Zero
Integration time
1–5 h
Uptime SLA
99.9 %
Entry price
149 €/Mo
The legal pressure
Three laws. One deadline.
Austria — Youth Protection Package 2026
Adult content platforms, erotic service providers, age-restricted e-commerce
Germany — JuSchG / JMStV (KJM)
Streaming platforms, gaming, dating apps, adult content
EU — Digital Services Act (DSA)
Online platforms, marketplaces, content platforms with EU users
The dilemma
Users do not want their state ID linked to sensitive sites.
Classic age verification stores names, addresses and ID numbers. The result: users refuse the verification, conversion collapses, or — worse — you are liable for a data breach involving extremely sensitive user behaviour.
Our approach
Zero-Knowledge Verification
We act as a technical intermediary: the user authenticates with ID Austria, we verify exclusively the date of birth (18+ yes/no), destroy all personal data immediately in memory and return a signed cryptographic token to your platform. Your platform learns: verified. Nothing more.
Technical flow
6 steps. Under 4 seconds.
- 01
User triggers verification
The user clicks on "Confirm age" on your platform. Your system calls our API with a session ID.
- 02
Redirect to ID Austria
We generate a secure OIDC/OAuth2 authorisation URL and redirect the user to the official ID Austria portal. Your platform never sees this flow.
- 03
User authenticates with ID Austria
The user authenticates with their digital identity — QR code, NFC chip or app. This happens entirely on official government infrastructure.
- 04
Zero-Knowledge check
ID Austria returns a cryptographically signed token to our gateway. We read exactly one field: the date of birth. We calculate 18+ and immediately discard all other data from memory.
- 05
Signed token generated
We generate a short-lived, RSA-4096-signed JWT: { verified: true, exp: ... }. No name, no address, no ID number.
- 06
Platform receives result
Your platform receives the token, validates our signature and grants or denies access. Done. The entire session leaves zero personal data traces.
Who needs this
Compliance is not optional.
Adult content platforms
Erotic streaming services, fan platforms, content marketplaces — highest legal exposure.
Erotic service providers
Online booking systems for licensed establishments — online reservation, registration.
Gambling & betting
Online casinos, sports betting providers, lottery platforms with EU licences.
Age-restricted e-commerce
Online shops for alcohol, tobacco, cannabis products, energy drinks.
Dating platforms
Apps and platforms that must ensure user age for legal and moral reasons.
Gaming & streaming
FSK 18 / USK 18 content, violent games, restricted films — platform-wide age lock.
Technical foundation
Next.js SDKPHP SDKPython SDK
NeonDB
Vercel EdgeDSGVO Art. 25Audit-LogPricing
Pay per verification. Or flat.
Pilot partner pricing — rates are fixed for the first 24 months after onboarding.
Starter
Up to 1,000 verifications/month. Ideal for local businesses and smaller platforms.
- ID Austria + German eID
- Hosted age gate UI
- SDK (JS/PHP/Python)
- Email support
- SLA 99.9 %
Business
From 1,001 verifications — no monthly limit. Scales with your usage.
- Everything in Starter
- International eID fallback
- Document-based fallback
- Webhook confirmations
- Priority support < 8 h
Enterprise
High-volume, custom SLA, white-label, dedicated infrastructure, legal indemnification.
- Everything in Business
- White-label (your brand)
- Custom SLA < 2 h
- Dedicated gateway instance
- Legal & compliance consulting
Frequently asked questions.
Your platform needs this before the deadline.
We are currently accepting the first 3 pilot partners for Q4 2025. Pilot partners receive fixed rates, direct developer access and influence on the feature roadmap.
