Pricing
Simple, transparent pricing
Start free. Upgrade when you are ready. Every plan includes a tamper-evident evidence pack for every verification.
Pricing
Simple, transparent pricing
Start free. Upgrade when you are ready. No hidden fees.
Essential
For small firms getting started with compliant POA.
- Up to 25 verifications/month
- Postal verification
- Basic evidence pack
- Email support
- Standard delivery
Performance
For growing firms that need the full toolkit.
- Up to 100 verifications/month
- Postal + Email + SMS OTP
- Full evidence pack
- Webhooks + REST API
- Custom branding
- Priority support
Enterprise
For regulated organisations with advanced needs.
- Unlimited verifications
- Everything in Performance
- Risk-based step-up logic
- SSO + data residency
- White-label option
- Dedicated account manager
Feature Comparison
| Feature | Essential | Performance | Enterprise |
|---|---|---|---|
| Postal OTP Verification | |||
| Email OTP | |||
| SMS OTP | |||
| Evidence Pack | |||
| REST API + Webhooks | |||
| Custom Branding | |||
| Risk-Based Step-Up | |||
| Bulk CSV Upload | |||
| Advanced Dashboards | |||
| Dedicated Account Manager | |||
| Ghost Address Detection | |||
| Audit Trail |
Need Enterprise Features?
SSO/SAML, data residency, multi-provider routing, white-label, custom SLAs, and unlimited verifications. Talk to our team.
Contact SalesFAQ
Common questions
We dispatch a physical letter to the address your client claims to reside at. The letter contains a unique one-time code (OTP) that can only be redeemed by someone with physical access to the mail delivered at that address. The recipient enters the code on our secure verification page, binding their identity to the physical address. This process is structurally resistant to deepfakes, synthetic IDs, and document forgery because it requires actual presence at the address.
UK first-class delivery typically arrives within 1-3 business days. EU and US delivery varies by destination but generally completes within 3-7 business days. Digital verification via email or SMS completes in under 5 minutes. You can use digital channels for instant checks and postal as a higher-assurance step-up when your risk policy requires it.
A utility bill or bank statement proves someone has access to a PDF, not that they live at an address. With generative AI, producing a convincing fake document takes seconds. Postal verification proves physical presence — something no AI can fabricate. The letter must be received at the actual address, making it structurally impossible to spoof from a different location.
Yes. We process personal data under legitimate interest for identity verification purposes. All PII is encrypted at rest using AES-256-GCM. OTP codes are hashed with SHA-256 and never stored in plaintext. We maintain a comprehensive audit trail for data subject access requests and support data deletion when retention periods expire. Our evidence packs document the lawful basis for processing.
Absolutely. Postal.id offers a RESTful API with webhook notifications so you can embed address verification directly into your onboarding flow. Create cases, track status changes, and download evidence packs programmatically. We provide a developer sandbox with test API keys for integration development.
Undelivered letters are tracked through our postal providers. If delivery fails, the case is flagged automatically and you can choose to re-dispatch to the same or an updated address. Failed deliveries are themselves a risk signal — if a letter cannot be delivered to an address someone claims to live at, that is valuable compliance information recorded in the evidence pack.
We currently support postal delivery across the United Kingdom, European Union member states, and the United States. Our provider abstraction layer means new countries can be added without any code changes on your side. Coverage expands regularly — contact us if you need a specific jurisdiction.
Each evidence pack is a tamper-evident PDF containing: the full timeline of verification events with timestamps, the assurance level achieved, policy decisions made, risk signals detected, delivery tracking information, verification method used, and a cryptographic hash ensuring the document has not been modified. Evidence packs are designed to satisfy FCA, SRA, and HMRC regulatory requirements.