The regulatory landscape in the EU is demanding, with the GDPR, PSD2, AMLD, and DSA setting some of the highest bars for data processing and user consent anywhere in the world. In practical terms, this means that any onboarding improvements online businesses want to make must first be reviewed by risk, legal, and privacy teams.
It also means that most businesses still require an unacceptable level of friction when onboarding customers.
Legitimate users are asked to scan the same identity document again and again, on every platform they use. This friction leads directly to frustration and abandonment by users and loss of revenue for the business.
The two competing pressures of regulatory rigor and users’ expectation of a fast, seamless experience are usually framed as a trade-off. In reality, they are two sides of the same challenge.
Redundant data capture is not just bad user experience, it runs counter to core privacy principles like data minimization. When a business forces a legitimate user to scan an identity document that has already been verified and secured within a trusted ecosystem, it introduces unnecessary friction and redundant data collection. With a consent-driven approach to reusable identity, businesses can leverage a previously verified identity and perform fresh checks on the data, without requiring users to repeatedly submit their documents.
selfie.DONE™ is designed to combat this very problem by providing true reusable identity. For trusted, enrolled users, the identity document scan becomes the fallback instead of the front door and ID verification checks still run in the background.
Privacy and Consent, Built In From the Start
Reusable identity only works if the end user controls when their verified identity is used. In the selfie.DONE workflow, there are two distinct points where end users can choose how to participate in reusable identity: whether to enroll in the experience at all, and whether to consent to using their previously verified identity data for a fresh verification in a given interaction. At either point, they can opt for the standard document-based verification experience instead.
Jumio takes its role as an independent controller seriously. That means honoring data subject rights requests, respecting consent withdrawals, limiting use to the purpose of the service, and maintaining appropriate international transfer mechanisms for cross-border processing.
Furthermore, Jumio securely continues to run required checks each time an identity is reused. We run a fresh biometric match and risk analysis against the identity on file every time, never on a cached result. Businesses retain the underlying identity data and document images, with configurable retention for recordkeeping. Eligible users get to skip the document capture process, while new, unrecognized, or higher-risk users still go through full verification. The mechanism that removes friction is the same one that keeps each decision current and defensible.
When consent is treated as a trust mechanism — apparent and timed to the moment of reuse — it gives users a reason to trust the platform. Sufficient consent for reusable identity means the end user knows who manages their reusable identity, who is requesting it, and what will be shared. This approach creates a foundation of trust that enables successful relationships between users and online businesses.
Built for Every High-Trust Digital Service
The balance of strong verification and minimal friction plays out differently in each sector, but the underlying tension is the same everywhere.
Gaming is probably the most instructive example, because consent and friction genuinely coexist there in an interesting way. Regulators require robust Know Your Customer (KYC) and player-protection checks. Players, meanwhile, expect app-speed registration and get frustrated by anything that slows them down. You can resolve this conflict through the elimination of redundancy: ruthlessly minimize data, streamline the experience, and still maintain every compliance checkpoint that actually matters. Every unnecessary document scan is a legitimate player at risk of dropping off your platform. With selfie.DONE, eligible players complete registration with just a selfie while required checks run in the background. Full verification stays in place for new, unrecognized, or higher-risk players.
Financial services and fintech face a similar dynamic. Digital bank onboarding has to be fast enough to convert customers, but a new customer may already be verified and enrolled elsewhere in a trusted ecosystem. Just because this business has never seen them before does not mean they should have to start their identity check from zero. selfie.DONE pulls the identity already on file and runs fresh checks against it — biometric match, risk analysis, identity graph signals — instead of asking for a new document scan, so legitimate customers convert faster without the business giving up verification rigor.
Crypto is another industry where fast onboarding of legitimate customers is essential to success. A new user who’s already verified elsewhere shouldn’t have to resubmit documents they’ve already provided. selfie.DONE lets that user complete onboarding with a selfie, while the required checks run against the identity already on file instead of starting verification from scratch.
Mobility and marketplaces require identity checks for drivers, sellers, and service providers. Many of these users are already verified elsewhere, and asking them to produce an ID and re-prove their identity slows down onboarding. selfie.DONE streamlines the experience by prompting users to simply take a selfie.
Reusable Identity, Now Everywhere
With selfie.DONE now available in EMEA, Jumio’s selfie-first reusable identity solution is global. This is an important milestone because it enables consistent identity intelligence across every region a business operates in. It allows you to move from point-in-time verification, where a document is checked once and a decision made at onboarding is largely not revisited, to continuous, connected, contextual identity intelligence. Every reuse triggers a fresh decision, informed by current signals, against an identity that has been verified and maintained. The result is a decision that’s faster for the user and more defensible for the business.
Streamlined onboarding and strong privacy and compliance are no longer a trade-off. The mechanism that removes friction — real-time re-verification against Jumio’s global, consent-based identity graph — is the same mechanism that keeps every decision current. This greatly reduces the tension between growth, risk, and compliance teams, who can now all benefit from the same approach.
Request a demo to see how selfie.DONE works in practice.
