Verify and assess risk
curl --request POST \
--url https://app.sahlfinancial.com/api/v1/kyc/assess \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"reference": "client-0001",
"environment": "sandbox",
"subject": "Test Client",
"kind": "individual",
"require_documents": false,
"values": {
"first_name": "Test",
"last_name": "Client",
"country": "MA",
"citizenship": "MA",
"annual_income": "84000",
"net_liquid_assets": "20000",
"total_net_worth": "60000",
"objective": "Balanced",
"horizon": "5-10 years",
"investment_knowledge": "Good",
"investment_experience": "< 5 years"
},
"documents": []
}
'const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
reference: 'client-0001',
environment: 'sandbox',
subject: 'Test Client',
kind: 'individual',
require_documents: false,
values: {
first_name: 'Test',
last_name: 'Client',
country: 'MA',
citizenship: 'MA',
annual_income: '84000',
net_liquid_assets: '20000',
total_net_worth: '60000',
objective: 'Balanced',
horizon: '5-10 years',
investment_knowledge: 'Good',
investment_experience: '< 5 years'
},
documents: []
})
};
fetch('https://app.sahlfinancial.com/api/v1/kyc/assess', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://app.sahlfinancial.com/api/v1/kyc/assess"
payload = {
"reference": "client-0001",
"environment": "sandbox",
"subject": "Test Client",
"kind": "individual",
"require_documents": False,
"values": {
"first_name": "Test",
"last_name": "Client",
"country": "MA",
"citizenship": "MA",
"annual_income": "84000",
"net_liquid_assets": "20000",
"total_net_worth": "60000",
"objective": "Balanced",
"horizon": "5-10 years",
"investment_knowledge": "Good",
"investment_experience": "< 5 years"
},
"documents": []
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text){
"verification": {
"passed": true,
"checks": [
{
"id": "legible:national_id",
"label": "national_id — key fields readable",
"severity": "warning",
"passed": true,
"detail": ""
},
{
"id": "expiry:national_id",
"label": "national_id — not expired",
"severity": "critical",
"passed": true,
"detail": ""
},
{
"id": "format:cin:national_id",
"label": "national_id — CIN number is well-formed",
"severity": "warning",
"passed": true,
"detail": ""
},
{
"id": "adult:national_id",
"label": "national_id — holder is 18+",
"severity": "critical",
"passed": true,
"detail": ""
},
{
"id": "required:photo_id",
"label": "Document establishing the account holder provided",
"severity": "critical",
"passed": true,
"detail": ""
},
{
"id": "expiry:recorded:id_expiry",
"label": "The identity document on file is not expired",
"severity": "critical",
"passed": true,
"detail": ""
},
{
"id": "screening",
"label": "Sanctions screening — no matches; PEP not list-screened",
"severity": "info",
"passed": true,
"detail": "screened against 23000 sanctions entries. The bundle carries no PEP list, so politically-exposed status rests on the client's declaration, not on a list check."
},
{
"id": "completeness",
"label": "KYC/KYB data completeness (61%)",
"severity": "warning",
"passed": false,
"detail": "missing 11 required data point(s): street1, city, province, postal_code, phone, email, source_of_funds, account_type"
}
],
"critical_failures": [],
"flags": [
{
"id": "completeness",
"label": "KYC/KYB data completeness (61%)",
"severity": "warning",
"passed": false,
"detail": "missing 11 required data point(s): street1, city, province, postal_code, phone, email, source_of_funds, account_type"
}
],
"completeness": {
"required": 28,
"present": 17,
"missing": [
"street1",
"city",
"province",
"postal_code",
"phone",
"email",
"source_of_funds",
"account_type",
"third_party",
"sin/ssn",
"pep_foreign/pep_domestic/pep_hio/pep"
],
"percent": 61
},
"policy": {
"id": null,
"version": 0,
"source": "legacy",
"regime": "none",
"regulator": null,
"purpose": "onboarding",
"overrides_refused": []
}
},
"assessment": {
"risk_profile": {
"score": 58,
"band": "Balanced",
"missing": []
},
"capacity": {
"score": 20,
"band": "Low",
"missing": []
},
"compliance_risk": {
"level": "Low",
"score": 1,
"factors": [
"Flag: KYC/KYB data completeness (61%) (missing 11 required data point(s): street1, city, province, postal_code, phone, email, source_of_funds, account_type)"
]
},
"suitability": "Suitable",
"risk_level": "Balanced",
"verification": {
"passed": true,
"checks": [
{
"id": "legible:national_id",
"label": "national_id — key fields readable",
"severity": "warning",
"passed": true,
"detail": ""
},
{
"id": "expiry:national_id",
"label": "national_id — not expired",
"severity": "critical",
"passed": true,
"detail": ""
},
{
"id": "format:cin:national_id",
"label": "national_id — CIN number is well-formed",
"severity": "warning",
"passed": true,
"detail": ""
},
{
"id": "adult:national_id",
"label": "national_id — holder is 18+",
"severity": "critical",
"passed": true,
"detail": ""
},
{
"id": "required:photo_id",
"label": "Document establishing the account holder provided",
"severity": "critical",
"passed": true,
"detail": ""
},
{
"id": "expiry:recorded:id_expiry",
"label": "The identity document on file is not expired",
"severity": "critical",
"passed": true,
"detail": ""
},
{
"id": "screening",
"label": "Sanctions screening — no matches; PEP not list-screened",
"severity": "info",
"passed": true,
"detail": "screened against 23000 sanctions entries. The bundle carries no PEP list, so politically-exposed status rests on the client's declaration, not on a list check."
},
{
"id": "completeness",
"label": "KYC/KYB data completeness (61%)",
"severity": "warning",
"passed": false,
"detail": "missing 11 required data point(s): street1, city, province, postal_code, phone, email, source_of_funds, account_type"
}
],
"critical_failures": [],
"flags": [
{
"id": "completeness",
"label": "KYC/KYB data completeness (61%)",
"severity": "warning",
"passed": false,
"detail": "missing 11 required data point(s): street1, city, province, postal_code, phone, email, source_of_funds, account_type"
}
],
"completeness": {
"required": 28,
"present": 17,
"missing": [
"street1",
"city",
"province",
"postal_code",
"phone",
"email",
"source_of_funds",
"account_type",
"third_party",
"sin/ssn",
"pep_foreign/pep_domestic/pep_hio/pep"
],
"percent": 61
}
}
},
"registry": null,
"case_id": "00000000-0000-4000-8000-000000000001"
}{
"detail": "Invalid or revoked API key"
}{
"detail": {
"code": "kyc_scope_not_allowed",
"message": "This workspace is not enabled for the partner KYC API."
}
}{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>",
"input": "<unknown>",
"ctx": {}
}
]
}{
"code": "rate_limit_exceeded",
"message": "Too many requests. Please slow down."
}{
"code": "internal_error",
"message": "An unexpected error occurred",
"details": null
}Verify and assess risk
Required scope: kyc:verify.
The verification verdict plus the risk assessment built on it.
Guide: Risk assessment.
POST
/
v1
/
kyc
/
assess
Verify and assess risk
curl --request POST \
--url https://app.sahlfinancial.com/api/v1/kyc/assess \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"reference": "client-0001",
"environment": "sandbox",
"subject": "Test Client",
"kind": "individual",
"require_documents": false,
"values": {
"first_name": "Test",
"last_name": "Client",
"country": "MA",
"citizenship": "MA",
"annual_income": "84000",
"net_liquid_assets": "20000",
"total_net_worth": "60000",
"objective": "Balanced",
"horizon": "5-10 years",
"investment_knowledge": "Good",
"investment_experience": "< 5 years"
},
"documents": []
}
'const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
reference: 'client-0001',
environment: 'sandbox',
subject: 'Test Client',
kind: 'individual',
require_documents: false,
values: {
first_name: 'Test',
last_name: 'Client',
country: 'MA',
citizenship: 'MA',
annual_income: '84000',
net_liquid_assets: '20000',
total_net_worth: '60000',
objective: 'Balanced',
horizon: '5-10 years',
investment_knowledge: 'Good',
investment_experience: '< 5 years'
},
documents: []
})
};
fetch('https://app.sahlfinancial.com/api/v1/kyc/assess', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://app.sahlfinancial.com/api/v1/kyc/assess"
payload = {
"reference": "client-0001",
"environment": "sandbox",
"subject": "Test Client",
"kind": "individual",
"require_documents": False,
"values": {
"first_name": "Test",
"last_name": "Client",
"country": "MA",
"citizenship": "MA",
"annual_income": "84000",
"net_liquid_assets": "20000",
"total_net_worth": "60000",
"objective": "Balanced",
"horizon": "5-10 years",
"investment_knowledge": "Good",
"investment_experience": "< 5 years"
},
"documents": []
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text){
"verification": {
"passed": true,
"checks": [
{
"id": "legible:national_id",
"label": "national_id — key fields readable",
"severity": "warning",
"passed": true,
"detail": ""
},
{
"id": "expiry:national_id",
"label": "national_id — not expired",
"severity": "critical",
"passed": true,
"detail": ""
},
{
"id": "format:cin:national_id",
"label": "national_id — CIN number is well-formed",
"severity": "warning",
"passed": true,
"detail": ""
},
{
"id": "adult:national_id",
"label": "national_id — holder is 18+",
"severity": "critical",
"passed": true,
"detail": ""
},
{
"id": "required:photo_id",
"label": "Document establishing the account holder provided",
"severity": "critical",
"passed": true,
"detail": ""
},
{
"id": "expiry:recorded:id_expiry",
"label": "The identity document on file is not expired",
"severity": "critical",
"passed": true,
"detail": ""
},
{
"id": "screening",
"label": "Sanctions screening — no matches; PEP not list-screened",
"severity": "info",
"passed": true,
"detail": "screened against 23000 sanctions entries. The bundle carries no PEP list, so politically-exposed status rests on the client's declaration, not on a list check."
},
{
"id": "completeness",
"label": "KYC/KYB data completeness (61%)",
"severity": "warning",
"passed": false,
"detail": "missing 11 required data point(s): street1, city, province, postal_code, phone, email, source_of_funds, account_type"
}
],
"critical_failures": [],
"flags": [
{
"id": "completeness",
"label": "KYC/KYB data completeness (61%)",
"severity": "warning",
"passed": false,
"detail": "missing 11 required data point(s): street1, city, province, postal_code, phone, email, source_of_funds, account_type"
}
],
"completeness": {
"required": 28,
"present": 17,
"missing": [
"street1",
"city",
"province",
"postal_code",
"phone",
"email",
"source_of_funds",
"account_type",
"third_party",
"sin/ssn",
"pep_foreign/pep_domestic/pep_hio/pep"
],
"percent": 61
},
"policy": {
"id": null,
"version": 0,
"source": "legacy",
"regime": "none",
"regulator": null,
"purpose": "onboarding",
"overrides_refused": []
}
},
"assessment": {
"risk_profile": {
"score": 58,
"band": "Balanced",
"missing": []
},
"capacity": {
"score": 20,
"band": "Low",
"missing": []
},
"compliance_risk": {
"level": "Low",
"score": 1,
"factors": [
"Flag: KYC/KYB data completeness (61%) (missing 11 required data point(s): street1, city, province, postal_code, phone, email, source_of_funds, account_type)"
]
},
"suitability": "Suitable",
"risk_level": "Balanced",
"verification": {
"passed": true,
"checks": [
{
"id": "legible:national_id",
"label": "national_id — key fields readable",
"severity": "warning",
"passed": true,
"detail": ""
},
{
"id": "expiry:national_id",
"label": "national_id — not expired",
"severity": "critical",
"passed": true,
"detail": ""
},
{
"id": "format:cin:national_id",
"label": "national_id — CIN number is well-formed",
"severity": "warning",
"passed": true,
"detail": ""
},
{
"id": "adult:national_id",
"label": "national_id — holder is 18+",
"severity": "critical",
"passed": true,
"detail": ""
},
{
"id": "required:photo_id",
"label": "Document establishing the account holder provided",
"severity": "critical",
"passed": true,
"detail": ""
},
{
"id": "expiry:recorded:id_expiry",
"label": "The identity document on file is not expired",
"severity": "critical",
"passed": true,
"detail": ""
},
{
"id": "screening",
"label": "Sanctions screening — no matches; PEP not list-screened",
"severity": "info",
"passed": true,
"detail": "screened against 23000 sanctions entries. The bundle carries no PEP list, so politically-exposed status rests on the client's declaration, not on a list check."
},
{
"id": "completeness",
"label": "KYC/KYB data completeness (61%)",
"severity": "warning",
"passed": false,
"detail": "missing 11 required data point(s): street1, city, province, postal_code, phone, email, source_of_funds, account_type"
}
],
"critical_failures": [],
"flags": [
{
"id": "completeness",
"label": "KYC/KYB data completeness (61%)",
"severity": "warning",
"passed": false,
"detail": "missing 11 required data point(s): street1, city, province, postal_code, phone, email, source_of_funds, account_type"
}
],
"completeness": {
"required": 28,
"present": 17,
"missing": [
"street1",
"city",
"province",
"postal_code",
"phone",
"email",
"source_of_funds",
"account_type",
"third_party",
"sin/ssn",
"pep_foreign/pep_domestic/pep_hio/pep"
],
"percent": 61
}
}
},
"registry": null,
"case_id": "00000000-0000-4000-8000-000000000001"
}{
"detail": "Invalid or revoked API key"
}{
"detail": {
"code": "kyc_scope_not_allowed",
"message": "This workspace is not enabled for the partner KYC API."
}
}{
"detail": [
{
"loc": [
"<string>"
],
"msg": "<string>",
"type": "<string>",
"input": "<unknown>",
"ctx": {}
}
]
}{
"code": "rate_limit_exceeded",
"message": "Too many requests. Please slow down."
}{
"code": "internal_error",
"message": "An unexpected error occurred",
"details": null
}Authorizations
API key created in the console. Scopes: kyc:extract, kyc:verify, kyc:eid; bank:read, bank:write (Growth plan, enabled per workspace by Sahl).
Body
application/json
A profile and the per-file extractions that back it.
Your own id for the client (see /extract). With one, the verdict is filed on the case for (workspace, environment, reference) and the answer carries case_id. Documents whose document_id came from /extract are linked to it.
Required string length:
1 - 64Pattern:
^[A-Za-z0-9_.:-]+$sandbox (default) or production.
Available options:
sandbox, production Client name (a person) or legal name (an entity), for the case. Up to 255 characters.
Maximum string length:
255The client profile, as an object of field keys to values: names, date_of_birth, address, id_type, id_number, id_expiry, occupation, income and the other data points. Unknown keys are ignored.
The documents entries that /extract returned, sent back unchanged.
Client kind: individual, corporation, partnership, charitable_org, trust, estate (aliases: entity, business, kyb, charity, fiducie, societe, succession). Decides which document establishes the account holder. Null falls back on entity.
True for a business (KYB). Used when kind is null.
Ask for the identity document. False is honoured only while the workspace policy does not lock identity verification, or on a periodic review. A refused switch is listed in policy.overrides_refused.
Sanctions screening of every party on the file. False is honoured only while the policy does not lock the sanctions screen.
Extra Canadian AML and PEP screening for a Canadian client. Null means the workspace policy decides. It needs eID provider credentials on the workspace.
Checks only you can run (a duplicate client, your own blocklist). They are added to the verdict and can block it. An id starting eid: or policy: comes back prefixed partner:.
Show child attributes
Show child attributes
onboarding (default) or periodic_review. A review does not re-verify identity; screening and every other lock still apply.
Available options:
onboarding, periodic_review