Identity · Biometrics · GDPR · Verified matching
KYC for au pair platforms: what an identity badge actually proves
The technical chain behind a “verified” badge — document, liveness, face matching, a timestamped verdict — then what really changes between unverified and verified matching. And what does not.
Direct answer
KYC (Know Your Customer) on an au pair platform is the identity verification of a member: reading an identity document, a liveness check, matching against a selfie, then a timestamped verdict. It proves that a person matches a document at a given moment. It proves neither future behaviour, nor the right to stay, nor childcare skills.
Not sure what an au pair exactly is? What an au pair is: definition, role & rules.
1. What KYC checks — and what it does not
KYC (“Know Your Customer”) comes from banking. On an au pair platform it means checking a member’s identity, at sign-up or later when the account reaches a paid plan. The exact scope varies from one service to another: that is precisely what you need to read before trusting a badge. A “verified” badge does not say what was verified — and that is usually where the confusion starts.
| Element | What identity KYC establishes | What it does not establish |
|---|---|---|
| Name, date of birth, face | That the document presented matches the person present at the time of the check. | The accuracy of the civil record beyond the document: a good forgery can pass. |
| Profile photo | That the person behind the account is the one on the document, on the check date. | That the account has not changed hands since, or that the photo is recent. |
| Age | The date of birth printed on the identity document. | Programme eligibility: age caps depend on the host country and status. |
| Duplicate accounts | That one document is tied to one account, which makes duplicates detectable. | That a genuine document is not being used by a consenting third party. |
| Criminal record | Nothing, unless a separate step was explicitly completed. | A full background check: references, schooling and interviews still need doing. |
| Right to stay | Nothing. KYC checks neither visa nor residence permit. | The right to work or stay: that is the consulate and the sponsor’s role. |
| Skills and behaviour | Nothing. No algorithm measures patience or safety around a child. | Fit with your family: interview, references and a trial period remain decisive. |
The rule to keep
KYC proves an identity, not harmlessness. It moves the risk: it makes impersonation harder and more expensive, without ever removing it. A family that understands this limit uses the badge as a filter, never as a green light.
That distinction shapes the rest: first the machine, then what it changes in a match, then what it leaves with the family and the sponsor. For the exact setup used by AuPair Connect, the page our safety approach is the reference: it states the public scope, including the provider.
2. The technical chain, step by step
Behind a badge there is not “an algorithm” but a sequence of checks, each with its own strength and weakness. Understanding the order lets you read a rejection, a doubt or a pass without the magic of technical vocabulary.
- 1
Document capture
The member photographs a passport or identity card in the app. Framing, sharpness, glare and edges are checked before upload.
Limit: A poor capture is the leading cause of false rejection. Photo quality is part of the check, not luck.
- 2
Field reading
The machine-readable zone (MRZ) of passports and cards is decoded with its check digit, then cross-checked against fields extracted by optical character recognition.
Limit: A misread accent or swapped first names can trigger manual review — not a pass.
- 3
Document authenticity
The document is compared with a template library: holograms, microprint, fonts, UV features, and the NFC chip of biometric passports when the device supports it.
Limit: No check catches every forgery. And a genuine document can be presented by the wrong person — the next step is what decides.
- 4
Liveness check
A selfie or short sequence confirms a real person is present: passive texture and depth analysis, or an active challenge (blink, turn the head, read digits).
Limit: Printed photos, filmed screens and simple replays are filtered out. Sophisticated masks and some generated faces can still pass.
- 5
1:1 face match
The selfie face is compared with the portrait on the document. The system returns a similarity score, not a binary answer.
Limit: The score depends on lighting, photo age and the individual. NIST studies document error-rate differences across demographic groups.
- 6
Decision and states
The outcome lands in a state machine: passed (CLEAR), to review (FLAGGED) or undetermined (INCONCLUSIVE). Borderline cases go to human review with a readable reason.
Limit: Any threshold is a trade-off between false accepts and false rejects. An automatic rejection with no retry is a design flaw.
- 7
Timestamp and retention
The verdict and its date are recorded. Raw documents stay with the authorised provider under a processing agreement, not in the platform database.
Limit: A badge is a snapshot, not continuous monitoring. Its date is part of the information.
Two practical consequences. First, a rejection is not a moral verdict: it is often a blurry photo or a cautious threshold, and a serious process offers a retry. Second, the value of a badge lies in what is kept: if raw documents sit on the platform with no retention limit, the check creates a risk as much as it reduces one.
The AuPair Connect case, plainly
Every profile has a verified contact point — an email address or phone
number whose holder proved control at sign-up. Identity verification is
voluntary, limited to VIP accounts and never required at sign-up: it relies on
Stripe Identity (identity document and liveness selfie). A
proof of address and a criminal record extract can be
added depending on the country, through separate steps. Only the verdict
(CLEAR, FLAGGED or INCONCLUSIVE) and its timestamp
are stored; raw documents stay with the authorised provider.
3. Unverified vs verified matching: what really changes
A badge does not change the profile; it changes the nature of the risk. The table below separates what verification moves from what it leaves untouched — including the rows where it adds nothing, because that is where false assurance hides.
| Risk | Unverified matching | Verified matching | Residual risk |
|---|---|---|---|
| Identity impersonation | Name, age and photo are self-declared. Nothing ties the profile to a real person. | The document and the face were matched at a dated point in time. | A genuine document presented by a third party, or a forgery that was not caught. |
| Stolen or reused photo | A photo found online is enough to build a credible profile. | The photo is tied to a person checked through liveness and face matching. | The account can change hands after the check; the badge date matters. |
| Age outside the programme | Age is declared and rarely checked before the interview. | The date of birth comes from the identity document. | The age caps of the country and status still need separate verification. |
| Duplicate accounts and ban evasion | A removed member can recreate a profile with another email address. | Tying a document to an account makes duplicates detectable. | A different genuine document, or use by a consenting third party. |
| Forged or synthetic document | No check at all: the document is just an image sent by message. | Document security features and the chip are checked when readable. | High-quality forgeries and recent edits remain possible. |
| Behaviour around children | Unknown. It surfaces in the interview, the references and the first days. | Unknown too. KYC measures neither patience, nor safety, nor motivation. | Video interview, references and a trial period remain the real protection. |
| Right to stay | Not checked. | Not checked either: it is outside KYC scope. | Visa, residence permit and sponsor approval are separate steps. |
| Criminal record | Not checked. | Not checked, unless a separate step was explicitly completed. | In France and Germany there is no legal requirement for au pairs. |
The most important row is behaviour: it reads the same in both columns. That is why identity verification does not replace the screening interview and references, a video call, or a written agreement. The badge reduces impersonation risk; it replaces none of the three proofs that, together, make a placement safer.
Proof 1 — Identity
Document, liveness, face matching, date of the check.
Proof 2 — Fit
Video interview, lawful questions, verifiable references.
Proof 3 — Framework
Written contract or agreement, visa or permit, insurance.
To compare platforms on this specific criterion, see the au pair website comparison: it lists, for each, the verification level claimed and its limits.
4. Biometric data: what the GDPR requires
A selfie compared with an identity document is not ordinary data. As soon as processing allows a person to be uniquely identified, it becomes biometric data under Article 4 of the GDPR and moves into the special categories of Article 9. That classification triggers a set of concrete duties the platform must be able to demonstrate — not merely display.
| Duty | What it means for the platform |
|---|---|
| Reinforced legal basis (Art. 6 and 9) | Explicit consent is the usual route for a private platform. Consent is only “free” if refusing does not block access to the core service: verification imposed at sign-up deserves specific legal review. |
| Minimisation and purpose (Art. 5) | Collect only what the check requires, for the stated purpose alone. No “just in case” copy of documents, no reuse for marketing. |
| Transparency (Art. 13) | State who checks, why, for how long, who hosts the data, and how to exercise rights. The provider’s name is part of fair information. |
| Automated decision (Art. 22) | A rejection produced solely by a score, with a significant effect, carries a right to human intervention and challenge. A final “no” with no appeal is a flaw. |
| Processors and transfers (Art. 28 and 44 ff.) | A processing agreement with the provider, and transfer safeguards when data leaves the EU (standard contractual clauses, transfer impact assessment). |
| Security and retention (Art. 32, 5 and 17) | Encryption, restricted access, a defined period, erasure at the end — unless a legal retention duty applies, which must then be named and bounded. |
| Impact assessment (Art. 35) | Large-scale biometric processing calls for a documented data protection impact assessment before go-live. |
One vocabulary point that avoids confusion: the EU artificial intelligence regulation governs biometric systems, but a 1:1 verification — confirming that a person is who they claim to be, with their participation — is not remote biometric identification. It remains biometric data processing subject to the GDPR. One does not replace the other.
Orientation summary, not legal advice. Sources: Regulation (EU) 2016/679 (GDPR); CNIL on biometrics; Regulation (EU) 2024/1689 on artificial intelligence.
5. What the law requires on top of KYC
This is the part platforms most often leave unsaid: a platform KYC does not substitute for any legal duty of the au pair programme. Depending on the host country, the reference check is run by a sponsor, by the family, or by a federal agency — never by the identity badge.
United States
- What the law requires
- The designated sponsor runs a background screening: school verification, three non-family references, a criminal check and a psychometric profile. Host-family adults are checked too (22 CFR §62.31).
- What KYC does not replace
- A platform KYC badge does not replace that screening: it contains neither the references, nor the psychometric profile, nor the sponsor’s criminal check.
Source: eCFR — 22 CFR §62.31.
France
- What the law requires
- No criminal record check is legally required for au pairs under the au pair agreement (Service-Public F13348). The employment declaration to Urssaf is the host family’s duty, within 8 days.
- What KYC does not replace
- KYC files nothing with Urssaf and does not replace the written agreement. These are two separate duties carried by the family.
Source: Service-Public.fr — F13348; Urssaf.
Germany
- What the law requires
- No criminal record check (Führungszeugnis) is legally required for au pairs at federal level. For third-country nationals, the employment must be approved by the Bundesagentur für Arbeit.
- What KYC does not replace
- KYC is not a Bundesagentur für Arbeit approval and does not replace the standard Au-Pair-Vertrag.
Source: BeschV 2013; Bundesagentur für Arbeit.
In practice, the question is not “is your platform safe?” but “who checks what, and which legal duty does it cover?”. A precise answer is worth more than a badge. For the visa and contract side, the au pair visa and contract guide details the documents and the competent authorities.
6. False trust signals
The vocabulary of trust has become a sales argument. These six signals are not always dishonest, but they are consistently weaker than they suggest. The right-hand column gives the question that resets the conversation.
| Signal shown | Why it is weak | What to ask |
|---|---|---|
| “Verified profile” with no scope | The word can cover a confirmed email or a checked document. | What exactly does the badge verify, and on what date? |
| Email or phone badge presented as identity | A contact point proves control of an address, not who the person is. | Does the badge rest on a document and a liveness check? |
| “Background checked” with no criminal step | The term is broad: without a separate step, no criminal record is consulted. | Which specific checks, and through which provider? |
| A screenshot of a badge | An image takes seconds to fabricate and cannot be verified outside the app. | Is the badge visible in the profile, with its date, on the platform? |
| “100% secure” or “zero risk” | No system can promise the absence of risk: that is a warning sign. | Which specific risk is reduced, and which residual risk is acknowledged? |
| Documents kept with no stated retention | Vague retention is both a GDPR risk and an unnecessary breach risk. | Where are the documents, who hosts them, and for how long? |
Factual comparison. No platform is named, and no badge is presented as a safety guarantee.
7. Ten questions to ask a platform
These questions fit on one page and are enough to tell a documented process from a marketing line. A serious platform answers them plainly; a platform that dodges has already told you something.
- 1
What exactly does the badge verify: document, liveness, address, criminal record?
- 2
Is the badge dated, and does it expire after a set period?
- 3
Who performs the verification, and where is the data hosted?
- 4
Are raw documents stored by the platform, or only by the provider?
- 5
What is stored: the verdict and its date, or the documents themselves?
- 6
Is there a human review after an automatic rejection, and an appeal path?
- 7
Is verification compulsory, voluntary, or tied to a paid plan?
- 8
Are biometric data kept separate from the rest of the profile?
- 9
Is there a processing agreement, and transfer safeguards outside the EU?
- 10
How do you report a fake profile, and how fast does the platform respond?
General reading grid, not legal advice. The duties that apply depend on the platform’s country of establishment and the host country.
8. Frequently asked questions about KYC on au pair platforms
Is KYC compulsory on an au pair platform?
No. Neither France nor Germany requires a platform to verify the identity of an au pair or a host family, so KYC is a platform decision, often tied to a paid plan. On AuPair Connect every profile has a verified contact point (email or phone), but identity verification is voluntary and limited to VIP accounts. A platform that presents its badge as a legal obligation is misleading you.
What does a “verified profile” badge actually mean?
It depends on what was checked, and that is the first question to ask. A badge can mean “email confirmed”, “identity document read and face matched”, or “document plus proof of address plus criminal record”. Those are three very different levels. A serious badge states its scope, the date of the check and the provider that ran it. Without all three, the badge is a marketing signal, not evidence.
Does KYC check a criminal record?
Usually not. Identity verification covers the document and the face; a criminal record check is a separate process with its own legal basis and country-specific steps. On AuPair Connect a criminal record extract can be added through a separate step depending on the country, and only the result (CLEAR, FLAGGED or INCONCLUSIVE) with its timestamp is stored — never the raw detail. In France and Germany no criminal record check is legally required for au pairs.
Does a verified badge replace a visa or a residence permit?
No. KYC answers one question: “is this person who they claim to be?” It says nothing about the right to stay, which belongs to the consulate and the permit issued: a long-stay visa in France, a national visa subject to Bundesagentur für Arbeit approval in Germany, a J-1 visa registered by a designated sponsor in the United States. Checking the visa is a separate task, to be completed before arrival.
Can biometric data be kept indefinitely?
No. Biometric data processed to identify a person falls under the GDPR special categories (Article 9): storage must be limited to the purpose, and raw documents are not meant to sit on the platform. The more protective model keeps documents with the authorised verification provider under a processing agreement, and retains only the verdict and its date on the platform. Any longer retention must rest on a specific, documented legal obligation.
Is a verified profile automatically safe?
No, and no honest platform will claim otherwise. KYC reduces one specific risk — identity impersonation and the reuse of documents or photos — at a point in time. It says nothing about patience, motivation, behaviour around children or respect for the agreement. A badge is proof of identity, not a guarantee of conduct: the video interview, references and a written contract remain essential.
Does KYC detect deepfakes?
Partly, and imperfectly. Modern liveness checks look for replay signals: a filmed screen, a printed photo, moiré patterns, temporal inconsistencies, missing depth. Newer systems add synthetic-face detection. But generation and detection keep leapfrogging each other: no single check guarantees that a synthetic face will be caught. That is why a human review path is still needed for doubtful cases.
Why can a genuine profile be rejected?
Because verification is probabilistic. A blurry photo, glare, a worn document, a new hairstyle or poor lighting can defeat an automated check. NIST studies of face recognition also document error-rate differences across demographic groups. A serious process allows a retry and a human review after a rejection, rather than a final refusal with no appeal.
Official sources (verified October 2026): CNIL — biometrics ; Regulation (EU) 2016/679 (GDPR) ; Regulation (EU) 2024/1689 (AI) ; 22 CFR §62.31 ; Service-Public.fr F13348 ; BeschV 2013 ; NIST — Face Recognition Vendor Test. AuPair Connect cannot be held liable for technical or legislative changes after the verification date nor for the interpretation of the texts cited. The official requirements of the host country and of the verification provider always prevail.
Read a badge before you trust it
Download AuPair Connect: the app brings profiles, secure messaging and verification options together; the written agreement stays between the family and the au pair. Available on the App Store and Google Play.
Keep exploring
Prepared by AuPair Connect — Compliance Team
Every legal, tax or safety detail in this content is verified by the AuPair Connect Compliance Team against official sources and dated.
Notice anything inaccurate or out of date? Help us keep this content up to date by writing to [email protected].