Launch HN: Didit (YC W26) – Stripe for Identity Verification

Post by b5chm1d7 » Tue, Mar 10, 2026, 6:03 PM UTC

iamacyborg wrote: post #40

rosasalberto wrote: post #32

Earlier quoted context omitted.

Comply Advantage specializes in AML, Seon as well. They provide one signal, identity verification is more than that.

They both offer IDV products and have entrypoints into enterprises as a result of their AML/KYC offerings.

Post by eks391 » Tue, Mar 10, 2026, 7:12 PM UTC

rosasalberto wrote: post #15

neya wrote: post #9

Here's a better idea: Eradicate requirement of the most personal details of someone to do basic tasks...such as using a web application. Unless it's a government organisation, no private provider should have the ability to use or process people's identities. It's too much power in one entity's hands. I wish someone would actually solve this instead of yet another ID solutions. We all saw how a literal job seeking app…

We actually agree with the core concern. Right now the internet has a terrible model where every company asks for your ID and stores it themselves. That means your identity data ends up scattered across dozens of databases. We think the future is privacy-preserving identity and reusability: verify once, keep your identity in your own wallet, and only share minimal proofs (e.g. “over 18” or “real human”) instead of yo…

Post by btown » Tue, Mar 10, 2026, 7:50 PM UTC

beachy wrote: post #34

btown wrote: post #19

Great to see innovation in this space! If I could make one giant request, it's around giving (properly authorized) humans the ability to override the system when needed. When you make a simple API, it's all too common for a company integrating the solution to rely entirely on the identity service's yes-no outcome. But all too commonly, there's no way to override a decision, or bypass the need for identification. In t…

This sounds innately wrong. When we think of celebrity clients traveling but skipping any identity checks because their entourage can vouch for them and don't want to hassle them - then who's to say later whether that person did or did not travel to that island or authorize that money transfer? Instead, this should be handled not by fudging identity verification but by skipping it and maybe tagging the skip event wit…

Post by rosasalberto » Tue, Mar 10, 2026, 7:55 PM UTC

d1dd40135cfdc5c wrote: post #36

rosasalberto wrote: post #30

Earlier quoted context omitted.

I don't have the full context on the Persona/Discord story yet, but our philosophy is that identity providers should be a shield, not a source of risk. We address this by building privacy-preserving architectures that minimize the data footprint. First, we offer secure, long-term retention so companies don't have to store sensitive PII on their own servers—which are often managed by teams who aren't cybersecurity spe…

(I want to emphasize that my intention is not to criticize Didit negatively. Rather, I aim to offer constructive feedback.) IMO, you should spend a lot of time working on your privacy policy. I have identified a few points of concern that you should work on: 1. Your policy is immensely vague. "legally stipulated periods of conservation" means nothing. There are no references to which laws are being referenced, and th…

Post by samuel_grupa_ai » Tue, Mar 10, 2026, 9:05 PM UTC