# Pre-KYC

**Pre-KYC** answers "**Who is this user?**". It verifies the user holds a genuine government document and, optionally, that they meet an age floor, come from an allowed country, and clear the OFAC sanctions list. It's the richest workspace: the only one where you can also ask the user to **reveal** document fields.

Use it when you need identity-grade assurance before (or instead of) a full KYC process (hence the name).

## What the user proves

- They hold a **genuine, government-signed document** (at your chosen [security level](/docs/self-enterprise/flows/disclosures/#security-level)).
- Optionally, that they meet a **minimum age**, without revealing their birth date.
- Optionally, that their document's country is **not on your denylist** (country stays hidden) or **is on your allowlist** (nationality is revealed).
- Optionally, that they **clear the OFAC sanctions list**.

## What you receive

- A `valid` / `invalid` result via the [`verification.completed` webhook](/docs/self-enterprise/webhooks/events/), with the enforced rules echoed in `proof_attributes`.
- A [nullifier](/docs/self-enterprise/get-started/how-it-works/#one-account-per-person-nullifiers) for duplicate detection.
- The values of any **Additional data** reveals you enabled. Pre-KYC is the only workspace with reveals:

  `Full name`, `ID number`, `Date of birth`, `Gender`, `Nationality`, `Expiration date`, `Issuing state`

  Each reveal is off by default. A reveal returns real personal data, so request only what you need and handle it accordingly. See [Disclosures](/docs/self-enterprise/flows/disclosures/#additional-data-reveals).

## Rules you can configure

| Rule | Default | Notes |
| --- | --- | --- |
| Security level | Hi-security | Standard also accepts non-chip documents like KYC attestations. |
| Minimum age | 18 | 13–110. Pass/fail only. The birth date stays hidden. |
| Excluded countries | — | Denylist. The user's country is never revealed. |
| Included countries | — | Allowlist, mutually exclusive with the denylist. Forces the Nationality reveal on. |
| OFAC | On | Checked against the daily-updated US Treasury list. |
| Additional data | All off | The seven reveals above. |

## Use cases

- **Fintech and regulated onboarding**: screen users (age, geography, sanctions) before running an expensive full-KYC provider, or replace one where attribute-level verification is enough.
- **Marketplaces**: verify both sides of a trade without storing PII yourself.
- **Compliance gating**: block sanctioned or restricted-region users at signup with an auditable record.
- **Account recovery / high-trust actions**: re-verify a user's identity attributes before sensitive changes.

## Cost

**25 credits** per completed verification, the highest of the four workspaces, reflecting the document-level assurance and reveals. See [Credits and usage](/docs/self-enterprise/billing/credits-and-usage/).

## Related

- [Configure a workspace](/docs/self-enterprise/dashboard/configure-a-workspace/): building the flow in the dashboard.
- [Supported documents](/docs/self-enterprise/flows/supported-documents/): which documents satisfy which rules.
- [Workspaces overview](/docs/self-enterprise/workspaces/): compare all four workspaces.