Ondato

What Ondato is

Ondato is a digital identity company that describes itself as a provider of KYC, AML and age verification services. The FAQ dates its start to October 2018, when it began operating under the Ondato brand, and places its headquarters in London with research and development in Vilnius, Lithuania. What it sells an adult operator is the age gate itself, the check that runs before a visitor reaches restricted areas or a creator account opens. The adult platforms page frames the product as "Frictionless Age Verification for Adult Content Platforms" and promises to keep minors and fake profiles off a platform without losing real users to friction.

Ondato also sells to banks, fintechs, online dating platforms and payment providers. Those products appear on the same site, but the age verification side is the only part described here that an adult platform would buy.

What it sells an operator

The adult platforms page lists methods that can be combined. Age estimation from a selfie needs no ID upload, and the page presents it as the lightweight option for low-friction entry. Document-based checks compare a user with a government-issued document and leave what the page calls a clear, auditable trail. Biometric liveness and facial recognition detect spoofing, deepfakes and static images, and match the face to the identity document. A reusable 18+ status lets a user who has passed once return without repeating the same checks.

The age verification page separates two products. OnAge is a reusable, token-based biometric check. Age Estimation is a one-time solution that has to be run again on each visit to the site, according to the FAQ on that page. The same page also offers a hosted, no-code link that the vendor describes as ideal for fast launches or pilots.

Integration options start with the static URL, which is a secure link shared by email, SMS or in-app message, and the page says it needs no development work. The Web and Mobile SDK keeps the flow inside the operator's own site or app. The API lets an operator build the whole flow from its own backend and control the rules. A user who starts on a desktop without a camera can finish on a phone by scanning a QR code, according to the FAQ.

The adult platforms page, read in October 2026, gives these service figures: a 30 second average onboarding, a 99.8% verification accuracy claim, a 97% average pass rate, coverage in 192 countries and more than 10,000 supported document types. These are the vendor's own claims. The FAQ gives around 60 seconds for a check, varying with the country and the solution chosen.

The terms that decide the choice

The pages do not publish an acceptable use policy for the sites that use Ondato, and they do not say what content an adult site may show. What they do state is the compliance frame. The age verification page lists alignment with GDPR, COPPA, CAADCA, DSA, the Online Safety Act 2023, PIPEDA, KJM in Germany and NIST. The About page places a KJM-certified solution in 2022 and a NIST benchmark in 2025. The FAQ names ISO/IEC 27001:2013 and ISO/IEC 30107-3 level 1 and level 2. The minimum age and the method are set by the customer, in the page's words: "You define the rules based on your regulatory context and user base."

The security page gives more detail on the age-specific certifications. It says Germany's Commission for the Protection of Minors in the Media (KJM) assessed the biometric authentication and identity verification system and found it fulfills the legal and technical age verification requirements, and it addresses adult media providers operating in Germany directly. The same page says the face age estimation is certified under the IEEE 2089.1 standard, that it was evaluated against NISTIR 8525, and that the company holds ISO/IEC 27001:2022 and meets eIDAS and ETSI requirements. Servers are under 24/7 monitoring, and sensitive data is protected at rest and in transit.

Access controls are part of the product. The FAQ says an operator can prohibit countries, nationalities or IP address lists. Ondato runs an internal Stoplist of known fraudsters that it says is integrated for all clients, and a biometric Stoplist is available on request.

The session rules are published. The whole identification flow, from consent to the photo of the document, has a 1 hour limit. A selfie session ends after 30 seconds if the user does not follow the prompts to move closer or hold still. Users can stop midway and continue: 2 reminder emails go out, and continuation links work for 7 days.

On data, Ondato calls itself the data processor and says each client is the controller that sets the rules for its users' data. Storage follows each client's service agreement. The age verification page states that OnAge and Age Estimation "never store or retain PII", which is the vendor's claim and not a term of any contract the pages describe.

Pricing is the weakest-documented point. The FAQ says pricing "depends on the number of specific solutions required, the number of identifications and other elements" and points to a separate pricing page. The why-ondato page says Ondato offers two main pricing models, one based on volume and one that includes a monthly commitment. As of October 2026 the pages give the structure of pricing, not a figure. Payment is accepted by credit card and crypto, and by invoice or bank transfer. Cancellation is handled by contacting the support team.

Contract length and refund terms are not published.

Getting started and support

Setup can be quick. A static link needs no development work. An SDK or API is for operators with developers of their own. The FAQ says the verification flow is available in a long list of languages, from English and German to Ukrainian, Vietnamese and Portuguese, and that another language can be added on request.

The why-ondato page lists 24/7 customer support among the reasons clients pick Ondato, and the FAQ sends contract cancellations to the support address. The contact page points to a verification guide and the FAQ, with offices listed in London and Vilnius. Onboarding paperwork for a new platform is not described.

Company and track record

Ondato says it has 100+ employees, 40M+ onboarded users, coverage in 192 countries and 8 KYC and AML-related solutions. Its About page names Liudas Kanapienis as CEO and Andrej Vistorskij as Chief Product Officer, and describes both founders as having met while working on fintech projects. The milestones list a Mastercard Lighthouse program finalist place in 2018, a KYB solution in 2020, and a Financial Times fastest-growing companies listing in 2024, 2025 and 2026. The partner page names CCBill, a payment company, among its partners.

Who it suits

Every point here is about age verification. Ondato fits an adult platform that wants a choice of methods on one service: a light selfie estimate at the door, a document check for higher-risk areas, and a returning-user status so repeat visitors do not start over. It also fits an operator that needs a hosted link for a pilot or a new market before committing developers to an SDK or API.

It fits less well where the operator needs unit prices before a sales call, an adult content policy from the vendor, or reserve and payout terms on the same pages. The 30 second selfie cutoff can also end a session for a user who does not follow the prompts, and pricing is by quote.

Breadth is the main draw. One provider covers estimation, documents, liveness, a reusable status and a link-based route, with a stated accuracy claim and a set of certifications an operator can name in its own compliance file.