We've added two new types of flags for associates that let you know if applications are waiting for customer action or on checks for an associate. These flags are:

• Waiting for customer (associate): This is related to the 'Waiting for customer' flag. It shows when more information or documentation about an associate must be provided.
• Waiting for checks (associate): This is related to the 'Waiting for checks' flag. It shows when a manually run check on an associate is being performed.

Improvements to the PassFort status page

PassFort provides notifications about platform uptime through our status page at https://status.passfort.com. This includes information about the availability of both PassFort's platform and the availability of the third party data providers accessible from our integration hub.

As PassFort begins to roll out new country-specific environments, starting with the UAE alongside our existing EU environment, we have introduced the ability to subscribe to specific countries of interest from the status page.

You can also subscribe to the specific data providers within the integration hub. By default, you have been subscribed to PassFort-EU and all integration hub providers.

Update your subscriptions by clicking the Subscribe to Updates button. Then, select the specific components you use and replace your existing subscription. You will also receive a subscription management link on all future PassFort status page emails.

To help improve user experience, data consistency, and accuracy, applicants can enter text and addresses are dynamically searched and shown for selection.

Here's what searching a business address looks like:

Users can input addresses manually if they choose or if you have no PassFort credit.

Contact us to take advantage of this feature.

You can now use New Zealand sources that require a passport number or a driving licence to find matches with your applicant data.

You will need your own agreement with GBG covering the New Zealand DIA Passport and New Zealand Driving Licence sources.

Contact us to get started, or read more here.

You can now see the date users last logged into PassFort.

The last login date is now displayed in the User Management list and will show a new label for users that have not logged into the system within the past 4 weeks. 

You can now see the granular reasons why Onfido checks pass or fail without leaving the PassFort Portal.

This uses the latest version of Onfido's API, version 3, to perform the ID verification (service collects documents) check.

You can also easily see the Onfido profile ID. And, if the PassFort profile has a customer reference, the Onfido profile is tagged with it automatically, making it easier to find in the Onfido Portal.

As with the previous integration, you can use Onfido to verify documents, selfies, and liveness videos.

Additionally, there's a new configuration option for all versions of the Onfido API that lets you specify which API region you're using.

To get started, contact us - we'll be happy to help. 

Or learn more in our help article.

Now you have the option to check whether an individual's bank account details are valid but don’t match the personal details provided.

With this configuration option, bank account validation is performed only if the bank details are not a match for the individual. This can help you onboard prospects quickly and manually investigate any issues with their bank account details at a later stage.

This new configuration option is for anyone using GBG ID3global checks resold through PassFort.

To get a reseller agreement for GBG ID3global or to turn on the new configuration option, contact us and we'll help you get set up.

You can learn more in our help article.

You can now use GBG's multi-bureau checks when running Electronic identity checks.

Our data partner, GBG, has introduced a multi-bureau Electronic identity check which lets you run checks against Experian and Equifax under a single GBG profile. You can use independent matches from both bureaus to produce a single result.

Configuration of the bureau order and rule set is managed by GBG so you will need your own agreement with GBG. Once you have your multi-bureau checks agreement in place, get in touch and we'll help complete the configuration.

PassFort stores highly sensitive information, so we are continually assessing our security practices to ensure they are up-to-date. As a result of our latest assessment, we will be introducing a new security measure which has the potential to impact customers directly.

When clients connect to PassFort's portal or API over HTTPS, the client and server agree on a cipher to use for the encrypted communication. For this to succeed, there must exist a cipher which is supported by both parties. On PassFort's side, a set of supported ciphers has been chosen with the goal of maximum compatibility, since older clients may not support newer ciphers.

However, we have found that several of the ciphers we support are vulnerable to an attack known as LUCKY13. As a result, we will be restricting the cipher-suite we support to eliminate those ciphers which are vulnerable to this attack.

The following ciphers will continue to be supported:

• ECDHE-ECDSA-CHACHA20-POLY1305
• ECDHE-RSA-CHACHA20-POLY1305
• ECDHE-ECDSA-AES128-GCM-SHA256
• ECDHE-RSA-AES128-GCM-SHA256
• ECDHE-ECDSA-AES256-GCM-SHA384
• ECDHE-RSA-AES256-GCM-SHA384

It is important that any HTTP clients you use to connect to PassFort (whether that's a browser or a software library) support at least one of these ciphers. This should be the case for all existing browsers as long as they are up-to-date. If you are unsure which ciphers are supported by your HTTP client, you can follow the instructions at https://www.howsmyssl.com/s/api.html. If your client does not support one of these ciphers, then you may need to upgrade the client to a more modern version.

In order to make this transition as smooth as possible, customers will have 3 months before we begin rolling out the changes (i.e. we will begin rolling out changes from October). We will then begin a trial period where we temporarily enable the new measures. If no issues are reported following this event then we will continue and enable the new features permanently.

Onboarding Australian businesses? CreditorWatch is a commercial credit reporting bureau specialising in Australian entities (including sole traders, trusts, and partnerships).

Use PassFort to run Company data checks. Retrieve ABR and ASIC data with CreditorWatch's Custom Profile API to verify company details and identify officers and shareholders.

To get started, contact us! Or learn more about the integration in our help article.