Aadhaar Verification Methods for Non-RE Entities (KwiKID Integration)

As KwiKID, a Technology Service Provider (TSP) by Think360.ai, you can legally implement Aadhaar verification without being a UIDAI Registered Entity (RE), using the following two offline methods. Both methods ensure user consent, security, and regulatory compliance.

1. Aadhaar Paperless Offline e-KYC (ZIP/XML Upload Flow)

User Journey & Flow in KwiKID:

1. User initiates the process: User is prompted to generate their Aadhaar Offline e-KYC ZIP from https://myaadhaar.uidai.gov.in.
2. Download and return: They download the ZIP file and return to the KwiKID platform.
3. Upload and verification: User uploads the ZIP and enters the share code on the KwiKID interface.
4. Backend processing (KwiKID server):
   • Extracts the XML using the share code
   • Validates the digital signature from UIDAI
   • Parses required data (name, DOB, gender, address, photo)
   • Stores parsed data into the secure KwiKID database

Compliance Benefits:

• User-initiated: Entire flow is user-initiated and consent-based
• Offline process: No API call to UIDAI; completely offline
• Lifetime validity: UIDAI XML has lifetime validity

Reference: UIDAI Offline KYC Documentation

2. Aadhaar via DigiLocker (Online Fetch with Consent)

User Journey & Flow in KwiKID:

1. DigiLocker authentication: On KwiKID's onboarding flow, user logs into DigiLocker via OTP
2. Consent provision: User gives consent to fetch e-Aadhaar PDF/XML
3. KwiKID processing:
   • Fetches document from DigiLocker
   • Validates UIDAI signature (PDF/QR or XML)
   • Parses relevant KYC fields
   • Stores verified data securely in the database

Compliance Benefits:

• Fully authenticated: Online process authenticated by user
• Time-bound validity: XML has 1-year validity
• Digitally signed: Documents are digitally signed by UIDAI

Reference: DigiLocker Official Portal

Data Flow Summary (KwiKID System)

Security & Compliance Framework

Data Protection:

• Encrypted storage: All PII and Aadhaar-related data are stored encrypted in KwiKID's backend
• Audit trails: Every flow logs explicit user consent and audit trail
• Signature validation: Ensures data authenticity & integrity

Regulatory Compliance:

• UIDAI guidelines: Follows all UIDAI guidelines for offline e-KYC
• User consent: Explicit consent captured at every step
• Data minimization: Only necessary KYC data is extracted and stored

Implementation Benefits

For Businesses:

• No RE requirement: Eliminates the need for UIDAI Registered Entity status
• Cost-effective: Reduces compliance overhead and infrastructure costs
• Scalable: Can be easily integrated into existing KYC workflows

For Users:

• Privacy control: Users maintain control over their Aadhaar data
• Convenient: Multiple verification options available
• Secure: End-to-end encrypted data transmission and storage

Technical Integration

KwiKID provides seamless integration APIs that allow businesses to:

• Implement both verification methods in their applications
• Customize the user interface according to their branding
• Receive real-time verification status and data
• Maintain comprehensive audit logs for compliance

This approach ensures that businesses can leverage Aadhaar verification capabilities while maintaining full compliance with UIDAI regulations and protecting user privacy.