Integrate age verification into an onboarding or access-control flow using a third-party service

Steps

1. Register a Yoti developer account and create an application in the Yoti Hub to obtain a Yoti Client SDK ID and a PEM private key for your application.
2. Choose the appropriate Yoti product for your use case: Yoti Age Estimation (AI-based, no ID required), Yoti Age Verification (document-based), or Yoti Digital ID (full attribute sharing); configure the desired attribute (e.g., age_over:18) in your application settings.
3. Integrate the Yoti SDK or generate a Yoti QR code/button on your verification page; when the user scans the QR code with the Yoti app or completes the browser flow, Yoti calls your configured callback URL with an encrypted receipt.
4. On the server, use the Yoti server-side SDK to decrypt the receipt using your private key and extract the verified attribute value (e.g., age_over_18: true/false) without receiving the user's underlying date of birth.
5. Grant or deny access based on the verified attribute; do not store unnecessary PII beyond the binary outcome required for your compliance obligation.
6. For jurisdictions with specific age verification regulations (UK AVRS, US state laws), confirm that your chosen Yoti product meets the required assurance level before deploying.