POS Self-Service 1

POS Self-Service.

Summary

On-site digital capture of ID documents and optional electronic signing to accelerate branch and point-of-sale onboarding and reduce manual entry.

Service Description

IDnow POS Self-Service Process (“process”) enables authorised employees to capture identity documents and extract identity data on behalf of the Customer at the point of sale. The solution provides a software application (mobile and web) that guides employees through document image capture, optical character recognition (OCR) and, where available, NFC chip readout to obtain chip derived data. Captured images and extracted data are transmitted to the Customer via the IDnow platform for further processing and storage.

The product is module-based and configurable, allowing Customers to adapt workflows, data fields and integration options to their specific use case and applicable regulatory requirements (e.g., KYC/AML obligations). IDnow supplies the software and platform; the Customer supplies and is responsible for the hardware, employee operation and the onsite identity verification performed by employees. Customers must consult the product specific technical documentation and the Order Agreement to understand available modules, technical limitations and to ensure chosen configurations meet their legal and operational requirements.

Key Capabilities

Product Configuration: Customers may configure the product in terms of:

  • POS Self-Service: Digital capture of documents at Point-of-Sale via NFC and/or OCR
  • NFC-based readout for German ID cards (dPA)/ German residence permits (eAT) and electronic passports where available
  • OCR image capture (front/back) with automatic cropping and optional manual images (up to 10)
  • Combined NFC + OCR for enhanced data set and automatic CAN readout
  • Document authenticity check via illumination (infrared/UV) where hardware allows
  • Support for common document types — dPA, eAT/AT, passports (chip availability depends on issuance date)
  • Employee-operated verification workflow — capture, review and submit document images and extracted data (verification performed by Customer’s employee)
  • Configurable data fields and export — results exposed via platform APIs or configured data export to Customer systems
  • Hardware requirements guidance — app requires access to camera and NFC hardware (Customer provides and verifies compatibility)
  • Secure transmission — encrypted data transfer between device and IDnow platform
  • SES/AES/QES electronic signature modules (optional), MultiSign and hash-signing
  • OrderID-based workflow with API and webhook result delivery
  • Audit trail and logging — capture metadata and process logs for traceability (subject to module selection)

Optional Modules and Configurations

Electronic signatures (SES/AES/QES)

  • Enable Simple (SES), Advanced (AES) or Qualified (QES) electronic signatures via a qualified Trust Service Provider (TSP).
  • QES provides highest legal assurance and requires compliant identity verification; AES enforces signer authenticity and data integrity; SES is a low‑assurance form of acceptance.
  • For AES/QES, identity confirmation is the Customer’s responsibility unless using IDnow‑issued “signed identification data” (Identification Reference Token) for QES (see QES token below).
  • IDnow acts as technical service provider enabling PDF signing; detailed requirements and eligible configurations are specified in the Order Agreement and API documentation.

MultiSign

  • Enables signing by multiple signers (≥2). Initial order holds PDFs; subsequent orders link to the initial OrderID.

Hash signature

  • Option to sign hashes instead of uploading full PDF files
  • Customer computes and submits document hashes to the API at order creation
  • PDFs do not need to be transferred to IDnow for signing
  • API signs the provided hashes and generates a signature container after execution
  • Signed signature container is retrievable via the API for later assembly or verification

Archiving

Long‑term archiving of evidence data and qualified timestamps available as an optional add‑on (additional fees may apply) to meet eIDAS QES evidence requirements.

Standard Data Retention and Deletion

  • Data and images made available via iTM interface.
  • Default deletion: production system within 7 days, backups within 14 days; unfinished orders time out after 90 days.
  • Extended data retention (optional)

Service Hours

  • General service hours: 00:00–24:00 CET, seven days a week
  • Maintenance windows: excluded from Service Hours

Compliance summary

POS module can be configured to meet national/regulatory requirements when appropriate modules (NFC, OCR, QES) are selected. Customers bear responsibility to ensure chosen configuration meets their regulatory needs; QES evidence storage obligations apply.

POS Self-Service 2

Questions?