Sumsub

Initial Consultation & Requirements Gathering

• Understand your business needs, compliance requirements, and user flow.

Integration Planning

• Map out integration points with your platform (web, mobile app).

Technical Setup & API Integration

• Use Sumsub’s APIs, SDKs, or pre-built widgets for seamless onboarding.

• Typical time: 2-6 weeks, depending on complexity and technical resources.

Configuration & Customization

• Tailor verification workflows, UI/UX, and compliance rules.

Testing & Quality Assurance

• Conduct testing to ensure smooth workflows.

Go Live & Support

• Launch the verification flow, monitor performance, and troubleshoot.

Workflow customization: Define verification steps, document types, and identity checks.

UI/UX customization: Tailor the appearance of the verification widget to match your branding.

Localization: Support multiple languages.

Rule-based automation: Set specific verification criteria or compliance rules.

Integration flexibility: APIs and SDKs allow for deep integration with existing systems.

Compliance configurations: Adjust checks based on different jurisdictions’ AML, KYC, or other requirements.

Setup Fees: May be charged especially for bespoke integrations or larger enterprise deployments.

Subscription Fees: Usually based on transaction volumes or number of verifications.

Support & Maintenance: Ongoing support included in some plans; premium support options available.

Additional Costs:

• Custom development or integration might entail extra costs.

• Additional features like advanced biometric checks or fraud detection may incur extra charges.

Onboarding Assistance: Sumsub provides onboarding support, including documentation, guides, and best practices.

Technical Support: Available via email, chat, or dedicated account managers, depending on the plan.

Training Resources: Webinars, video tutorials, and SDK documentation to help your team understand integration and workflows.

Customer Success: Many plans include a customer success manager to assist during implementation and beyond.

Dedicated Support Plans: Higher-tier packages often offer 24/7 support, SLA guarantees, and hands-on training sessions.

Data Encryption: End-to-end encryption (E2EE) during data transmission and at rest.

Compliance Standards: Adheres to GDPR, ISO 27001, SOC 2, and other relevant certifications.

Access Controls: Role-based access management, audit logs, and secure authentication methods.

Fraud Prevention: Advanced fraud detection, biometric checks, and anti-spoofing technology.

Data Residency: Options for data storage in specific locations to comply with local laws.

Regular Security Audits: Continuous vulnerability assessments and compliance checks.

Release Schedule: Frequent updates, typically monthly or bi-monthly for minor feature releases; major updates less often—usually quarterly or semi-annual.

Update Management: Managed via continuous integration and deployment pipelines, with minimal downtime.

Communication: Customers are informed ahead of significant updates, with changelogs and documentation provided.

Backward Compatibility: Maintained whenever possible; major changes are documented and supported during transition periods.

Ownership: Customers retain ownership of their data at all times; Sumsub acts as a data processor on your behalf.

Data Access: You can access your data via APIs or download reports.

Data Portability: Sumsub supports data export and migration, enabling you to transfer data to other systems if needed.

Retention Policies: Data is stored according to legal and contractual requirements, with options to delete or anonymize data upon request.

Compliance: Behaves in accordance with GDPR and other privacy laws, ensuring users' rights are protected.

Flexible Plans: Sumsub typically offers scalable subscription plans based on verification volume or user counts.

Upgrade/Downgrade: Easy to adjust plans via your account manager or platform dashboard.

Contract Terms: Usually monthly or annual contracts, with the ability to pause, upgrade, or downgrade with prior notice (often 30 days).

Capacity Expansion: Can be done promptly to meet increased organizational needs—often within days.

Flexible Pricing: Pay-as-you-go options may be available, allowing for more granular scaling.

Renewal: Contracts generally auto-renew at the end of the term unless canceled ahead of renewal date (often 30 days’ notice).

Cancellation: Based on contractual notice periods—typically 30 days prior to the end of your current term.

Early Termination: Specific conditions vary; some agreements may include fees or notice requirements.

Renewal Notices: Usually automated, with reminders sent well before renewal periods.

Data & Transition: Upon cancellation, you may request data export and a timeline for data deletion (per privacy law compliance).

Renewal Discounts: Negotiable, especially for long-term or large-scale contracts.

GDPR (General Data Protection Regulation): Ensures data privacy and rights for EU residents.

ISO 27001: International standard for information security management.

SOC 2: Service Organization Control reports emphasizing security, availability, and confidentiality.

PCI DSS: For payment data security, if handling financial transactions.

KYC/AML Regulations: Compliance with anti-money laundering and know-your-customer standards applicable across multiple jurisdictions.

Local Data Residency & Privacy Laws: Supports regional data requirements (e.g., CCPA in California).