Skip to content

VEID Overview

VEID — Verifiable Electronic Identity is VirtEngine’s decentralized identity layer. It lets marketplace participants prove who they are — to the strength the situation demands — without surrendering their biometric data to a central operator or to the public chain.

ON DEVICE — capture app 1 · Consent biometric notice + terms 2 · Document front/back + OCR 3 · Liveness selfie + active checks 4 · Biometrics fingerprint / iris 5 · Attestation Play Integrity / App Attest 6 · Encrypt envelope → vault 7 · Scopes on-chain references 8 · Verify signed results on-chain Raw biometrics never leave the encrypted vault — the chain stores only encrypted scope references and signed verification attestations.
The VEID capture pipeline. Everything sensitive is captured and encrypted on-device; the chain holds only encrypted scope references and signed verification results.

A permissionless compute market is a magnet for Sybil attacks, fake reviews, usage fraud, and money-laundering-adjacent behavior. VEID raises the cost of all of these by tying marketplace roles — provider registration, validator onboarding, tenant accounts, reviews — to verified identities, while keeping the verification data itself private.

CapabilityWhat it does
Document captureFront/back identity document photos with OCR extraction
Selfie + active livenessAnti-spoofing challenges that defeat photos, replays, and masks
Biometric hardware captureFingerprint/iris templates via platform-secure APIs
Device integrity attestationPlay Integrity (Android) / App Attest (iOS) verdicts
Encrypted vaultAll templates and payloads encrypted via the VEID envelope
On-chain scopesx/veid records referencing encrypted vault payloads
Zero-knowledge proofsx/veid/zk — prove properties of identity data without revealing it
Verifier registryx/veidregistry — governance-approved verifier versions

Identity data is partitioned into consent-scoped categories:

Scope IDData includedGDPR special category
veid.biometricFacial templates, liveness scoresYes (Art. 9)
veid.documentOCR-extracted text, document scansNo
veid.basicName, date of birth, addressNo
veid.verification_historyTimestamps, scores, ML versionsNo
veid.trust_scoreScore, factors, confidenceNo
veid.geo_locationCountry, region (not precise GPS)No
veid.device_fingerprintBrowser, OS, device typeNo

Biometric hardware and device attestation payloads add the biometric_hardware and device_attestation scope types. Each scope is consented to independently — see the Consent Framework.

identity.org.au is a Foundation-operated website and public education service. VEID is different: it is decentralised protocol technology operated by participating validators under the network rules. The Foundation does not run a central VEID verification service, and eligible validators may join the network.

Verification work is performed against governance-approved verifier versions tracked in x/veidregistry (upsert → approve → retire lifecycle, plus validator readiness reporting). Validator compensation remains governed by the network’s conservative staking and issuance policy; no fixed VEID reward pool or yield is promised.

The repository ships a mobile reference implementation at mobile/veid-capture-app/ covering the full enrollment pipeline. The identity program also maintains a public presence at identity.org.au.