Orchestrate evidence
Capture the right signals, normalize them, apply customer policy, and preserve an explainable record of what happened.
Europe launch room
This is the working record for a potential MojoVerify European branch: what the platform is today, what we can responsibly claim, what must change for the EU market, and which decisions we need to make together.
Discussion status: This page separates production capability from proposed EU work. References to qualified signatures or trust services describe a potential partner-led path—not a current MojoVerify qualification or regulatory status.
01 / Current position
MojoVerify is an identity-proofing and trust-orchestration platform. It brings government-ID evidence, liveness, one-to-one face comparison, policy decisions, audit trails, verified signing, and portable verification status into one API and hosted workflow.
Capture the right signals, normalize them, apply customer policy, and preserve an explainable record of what happened.
AWS currently provides core OCR, liveness, and face-comparison capabilities; MojoVerify owns the workflow, rules, thresholds, and evidence layer.
For Europe, document and model coverage should be earned country by country through labeled testing—not claimed continent-wide.
Production today
European design position
Keep AWS where it is validated and competitive. Add specialist or governed in-house models only where country, document, language, or fraud-pattern coverage requires them.
That is a provider-neutral hybrid architecture, with measured routing and a review path—not automatic replacement of the current stack.
02 / Partner questions
These are the current working answers. They should tighten as the pilot market, document set, and regulatory roles are selected.
Current answer: there is not one production MojoVerify-trained model behind a single fraud probability. We previously developed our own models, then retired them when AWS performed better on our U.S. results.
AWS provides Face Liveness, face comparison, face-quality signals, and core identity-document extraction. MojoVerify provides capture, local PDF417/MRZ parsing, normalization, checks, signal orchestration, thresholds, reason codes, and audit evidence. The document-authenticity and overall verification scores are deterministic scorecards; they should not be described as calibrated probabilities.
EU direction: return to a governed hybrid only for areas where the incumbent stack lacks validated coverage. Every added model or provider should be benchmarked by document version and demographic segment before production routing.
Current answer: not automatically. Production decisions do not silently retrain themselves or change from customer volume. The system is designed to rerun approved evaluation data through revised parsers, rules, thresholds, models, or providers so accuracy can be compared and improved through a deliberate release.
EU direction: create a governed feedback loop using labeled outcomes, versioned datasets, pre-release evaluation, drift and bias monitoring, human approval, rollback, and customer-visible change control. The default should be no use of customer biometric data for MojoVerify model training unless there is a documented legal basis, purpose, notice, contract, and retention policy.
Current answer: MojoWallet is not designed to custody or transmit customer funds itself. It integrates third-party providers such as Coinflow for supported fiat and crypto transaction flows. MojoWallet provides the simpler customer experience, normalized account view, ledger presentation, and orchestration; the third parties perform the underlying custody and money movement. This provider-based model works today.
For U.S. or European diligence, the funds-flow diagram should name each provider and identify which entity receives, holds, converts, or transmits each asset. Registrations and authorizations should then be confirmed against those actual roles and jurisdictions rather than describing MojoWallet as the custodian.
Current answer: gaming and sweepstakes are part of MojoWallet’s product lineage and some of its deepest implemented workflows, but that does not establish them as a majority of current customers.
EU direction: lead with the reusable identity layer—identity proofing, age and eligibility evidence, liveness, fraud controls, and verified signing. Treat gaming as a separate, country-specific track with a locally licensed operator and counsel-approved product, promotional, and payments flows.
Current answer: the capture flow accepts U.S. and Canadian driving licences and passports. Implemented non-U.S. parsing includes Canadian AAMVA PDF417 data and standard passport MRZ formats. Passports from Sweden, the United Kingdom, and Germany have also been tested successfully and worked through the existing pipeline without country-specific changes.
Those results are a strong starting point, but not yet an “all passports” or broad EU national-ID claim. AWS documents AnalyzeID for U.S.-issued identity documents, while MojoVerify’s OCR and MRZ path can process additional passports. We will expand the country, document-version, image-condition, authenticity, fraud, and regression test matrix before making broader production coverage claims.
03 / EU launch work
The work is less about translating screens and more about narrowing claims, proving coverage, and establishing the right legal and operational roles.
Select one Member State, one customer profile, one regulated context, and one accountable operating entity.
Swedish, UK, and German passports work in initial testing. Expand and publish the matrix by country, document version, language, sides, checks, and last regression date.
Define controller/processor roles, biometric-data basis, DPIA, regional architecture, transfers, retention, deletion, and data-subject rights.
Rerun approved evaluation data deliberately; version thresholds and models; test performance, bias, drift, spoof resistance, explainability, review, and rollback.
Add retry limits, alternative verification, manual review, meaningful reason codes, accessibility, and an appeal path.
Assemble architecture, subprocessor, access-control, encryption, key-management, incident-response, and secure-development evidence.
Add X.509 certificate signing and PAdES foundations, then integrate qualified services through an EU-listed provider where QES is required.
Document third-party fiat and crypto roles, including custody and transmission, while keeping gambling, sweepstakes, and promotions outside the first identity pilot unless required.
04 / Trusted signing
“Trusted signature provider” means different things in the two markets. The product architecture can be shared; the regulated status cannot.
Today
MojoVerify can gate a signing flow with liveness and customer identity, record append-only lifecycle events, retain IP/geolocation/user-agent evidence, hash signature metadata, encrypt signed PDFs, watermark downloads, and issue expiring or revocable shares.
This is strong evidence, but it is not yet a certificate-based PAdES signature or an EU qualified electronic signature.
Implement X.509-backed PDF signing, PAdES validation profiles, trusted timestamps, certificate-chain and revocation evidence, signer intent, and long-term validation material.
For EU cases requiring a qualified electronic signature, integrate a qualified trust service provider appearing on an EU national trusted list. MojoVerify remains the identity, policy, orchestration, and evidence layer.
The U.S. has no single national QTSP designation equivalent. Position X.509/PAdES as stronger integrity, authentication, and audit evidence while counsel confirms ESIGN, UETA, state, and sector requirements.
Only pursue MojoVerify’s own qualified status if volume and strategy justify establishment, conformity assessment, supervisory approval, NIS2-grade operations, ongoing audits, liability, and trusted-list maintenance.
05 / Proposed pilot
One country. One use case. Two or three document types. One agreed decision policy.
Target Member State, customer, user population, languages, assurance level, and prohibited uses.
Document capture, field extraction, authenticity signals, liveness and face match on a labeled evaluation set.
Privacy roles, notices, consent where applicable, retention, deletion, review, redress, and incident ownership.
Completion, false accept/reject, manual-review rate, demographic performance, fraud yield, latency, and user drop-off.
06 / Next meeting
Launch market: Which country should be first, and why is it the right regulatory and commercial test?
First customer: Which concrete workflow are we solving, and who owns the decision made from MojoVerify evidence?
Document set: Which two or three document types, versions, sides, and languages must work at pilot launch?
Signature level: Is standard electronic evidence enough, or does the use case need advanced or qualified signing?
Local roles: Who supplies legal, privacy, security, document, banking, or qualified-trust-service expertise?
Owners + dates: Assign one owner and due date to the coverage matrix, data-flow pack, pilot plan, and commercial model.
Working objective
Agree the smallest credible European pilot, then turn each assumption on this page into evidence.
This working page is product planning material, not legal advice. Market-entry, privacy, financial-regulation, gambling, and signature conclusions require qualified counsel in the selected jurisdiction.