At shortlist: ID and face check
One check on the candidate's own phone reads their ID, confirms a live person and matches the face to the ID photo.
When it is sent
With Verify at shortlist on, which it is by default, Elsin emails the candidate a link when they move into an interview, assessment or offer stage. It is not sent when the candidate already shows as Verified or Checked on device, already has an open request, or your plan's monthly verifications are used up. A reviewer can also send it from the review queue with Ask to verify identity.
The link lasts 14 days. The candidate needs a confirmed email, and can try up to 5 times a day.
What the candidate does
- Reads what happens and agrees. The camera does not start before this.
- Shows their passport, ID card or driving licence. Elsin reads the machine-readable zone of a passport or ID card, or the barcode on the back of a US or Canadian licence. Typing the number is allowed but does not count as the ID being read.
- Turns their head in four directions, in an order the server picks. Each run can be used once, within 10 minutes.
- Waits while the face is matched to the ID photo, on the device.
On a computer, the candidate can scan a QR code and finish on their phone. The handoff link works for 10 minutes.
What leaves the device
Each head turn's timing, size and brightness, the face match distance, the ID's country and kind, how the number was read, whether it has expired, and one-way codes of the document number and of each word of the name. No image, video, face template or raw document number is sent. The server decides the match from the distance and re-keys the codes before storing them.
The result
- Checked on device
- The face matched an ID that was actually read. The candidate can then send the ID photo to a person at the employer to confirm it.
- Verified
- A person at an employer Elsin has approved confirmed the ID photo after a device match. Verified travels to every employer on Elsin.
- Manual review
- The number was typed, the ID has expired, the name does not match the application, or the face did not clearly match.
A check is valid for 12 months. When another employer asks, the candidate shares it with one tap instead of scanning again. Only a person-confirmed result arrives as verified; a device-only result arrives as Checked on device.
The web camera check has no device attestation, so a determined attacker could fake what the browser reports. That is why a person confirms the ID before anyone shows as Verified. Phone wallet IDs and passport chip reads are built but not switched on.