XpertVerify

What is XpertVerify?

XpertVerify is an API-first data verification platform from the XpertARC group.

How do the API tokens work?

Each client organization is issued bearer tokens scoped to that org. Every token carries an explicit list of activated services — a token enabled for PAN and bank-account verification cannot call Aadhaar or GST endpoints, and any attempt is refused and logged. Tokens support IP allowlists, rate limits, instant revocation and rotation, so a leaked key is a settings change, not an incident report.

What does prepaid vs postpaid mean here?

Two billing modes on identical metering. Prepaid: you load a wallet, and each verification debits it at the published per-call rate — with low-balance alerts so nothing fails unexpectedly. Postpaid: usage is metered through the month and invoiced on agreed terms. Start prepaid with no minimum commitment, switch to postpaid when your volumes justify invoicing — it's an account setting, not a new contract negotiation.

What exactly gets logged, and why does it matter?

Every API call is logged with timestamp, token, service, response status, latency, the billing debit and the consent flag where the check involves personal data. That log is your defence file: when a customer disputes an onboarding decision, an auditor samples your KYC process, or a regulator asks how a verification was performed, the evidence is a query away — not a reconstruction project.

How fast can we integrate and go live?

The same day, for a basic flow. Sandbox keys work immediately after registration, with deterministic mock data for your test suites. The APIs are conventional REST with bearer authentication — most teams make their first sandbox call within the hour and are production-live on their first service within days.