Prove the age, not the identity
Preuvia establishes that a person is of the required age without any image or identity leaving their device, and gives the service that requires it an enforceable proof file.
Product under development: every capability announced below is in the specification, and its status is shown.
No image, no identity, no tracking
These rules are not options: a proof that says more than "at least N years old" is rejected, and each rule is verified by a test that fails when the rule is broken.
-
No image leaves the deviceNo photo, no video, no template, no features: not even to Preuvia's servers.
-
Strict minimisationThe attestation says "at least 18" and nothing else. Any over-disclosure is discarded.
-
No cross-site traceabilityAudience bound to the service, single-use challenge, no stable identifier: two services cannot cross-reference a person.
-
European issuers, nothing simulatedOnly European Union issuers listed on the trust list are accepted; without an issuer, every verification fails.
What Preuvia covers
The verification core is delivered; on-device estimation and the EUDI wallet connection are under development. Nothing is announced that is not in the specification.
On-device age estimation
The model runs on the person's own device. Only a threshold result comes out, never an image.
EUDI wallet
Verification of signed age attestations, by composing Idkrypt instead of rewriting a verifier.
Fallback ladder
Below the safety margin, the case is routed to a stronger method: a statistical model never closes the door on its own.
Enforceable proof file
Attestation log, measured error rates and impact assessment: enough to demonstrate, not merely to claim.
Hostable at the customer's site
Reproducible image, no third-party resource, no remote service imposed.
Accessible journey
Goal: a path with no camera and no wallet, usable by keyboard and screen reader.
Pricing to come
No figure has been set yet: pricing will be published at launch, in line with the SANTVIA galaxy offers.
- Minimal age answer per check
- Proof file
- Image hosted on your infrastructure
- Proof file
Preuvia composes with the rest of the galaxy
Each SANTVIA product remains usable on its own; Preuvia builds on them rather than rewriting them.
Frequently asked questions
Does my photo go to a server?
No. No image, template or feature leaves the device, not even to Preuvia. Only a threshold result, "met or not", is transmitted.
What is the difference between estimation and verification?
Estimation guesses an age on the device and is only used to accept. Verification relies on a signed attestation from the EUDI wallet: it is used when estimation is not enough, or for adult access.
What does the proof file contain?
The log of successful checks, without identity, the policy applied, the measured error rates and the impact assessment. Failures are never logged.
Can I host Preuvia myself?
Yes, it is a product requirement: reproducible image, no third-party resource, no remote service imposed.
Is Preuvia available?
Not yet. The verification core is delivered; on-device estimation and the EUDI wallet connection are under development. Join the waitlist to follow progress.
Be notified when Preuvia launches
The verification core is already written. Join the waitlist to follow progress.
Two paths, one file
The service that requires an age receives a minimal answer and a file it can present to an auditor. The person sends neither a photo nor an identity document to Preuvia.
On-device estimation
Where the framework allows it, age is estimated on the device: only a "threshold met or not" result comes out, never an image. Under development.
Verification through an EUDI wallet
When estimation is not enough, or for adult access, the person presents a signed attestation from their EUDI wallet. Estimation can accept, but never refuses on its own.
Proof file
Every successful check is entered in the log, without identity. The service draws from it a proof file: what was checked, how, and with what measured reliability.