Integrate Yoti age verification API for regulatory-compliant age assurance under UK Online Safety Act

Steps

1. Register as a relying party on the Yoti developer portal and obtain an API key and SDK ID for the Age Verification product.
2. Choose the appropriate age assurance method: document-based age verification (scan government ID), estimation-based age assurance (facial age estimation, no PII stored), or Yoti Digital ID (user presents a pre-verified credential).
3. Integrate the Yoti age verification via the hosted UI redirect or the Yoti.js / mobile SDK; configure the age threshold (e.g., age_over_18 or age_over_21) and the allowed verification methods in your Yoti application settings.
4. Handle the verification result callback: Yoti returns a boolean age_verified attribute and, for document-based paths, a date_of_birth or age_over_N claim; store only the minimum required claim as mandated by GDPR data minimization.
5. Confirm your implementation satisfies Ofcom's age assurance requirements under the UK Online Safety Act (enforcement began January 2025 for pornographic content, July 2025 for user-generated content platforms) by using a certified age assurance provider.
6. Conduct user acceptance testing with edge cases including expired documents and facial estimation at boundary ages (17/18) to validate threshold accuracy before launching.