Inspiration
What it does
How we built it
Challenges we ran into
Accomplishments that we're proud of
What we learned
What's next for PortalX
💡 Inspiration
In today's digital age, physical ID cards and static KYC documents leave a permanent, vulnerable data trail. Inspired by the concept of "self-destructing messages," we wanted to build a Universal Temporary Identity Layer. The goal was to give users complete control over their identity by ensuring their data exists only for the exact duration of a transaction, completely eliminating the risk of data breaches.
⚙️ What it does
PortalX is a NextGen Ephemeral Identity Layer. Instead of sharing a physical ID, users generate a time-bound "Secure Enclave" authenticated via 3-Factor Biometric Convergence (Retina, Voiceprint, and Liveness). Once the verification timer expires, the identity packet self-destructs completely, leaving zero data trail.
💰 Business Model (RevenueCat Integration)
To make PortalX a sustainable business, we designed a highly scalable SaaS model using RevenueCat:
- PortalX Pro (B2C): Basic ephemeral IDs are free. Users can upgrade via RevenueCat in-app subscriptions to unlock premium features like extended token lifespans, multi-device identity sync, and advanced privacy audit logs. RevenueCat makes handling these cross-platform subscriptions seamless.
- Enterprise API (B2B): Businesses pay a tier-based subscription to access our verification API, allowing them to verify users without the liability of storing KYC data.
🛠️ How we built it
We architected the system to achieve strictly enforced OWASP MSTG-L2 compliance. A massive part of our engineering went into mapping the architecture to comply with 11 major regulatory frameworks, including RBI, NPCI, PCI DSS, FIU-IND, UIDAI, and the DPDP Act. We built automated Python scripts to generate our Master Compliance Architecture dossier.
🚧 Challenges we ran into
The biggest challenge was architecting a system that satisfies 11 different legal and regulatory authorities simultaneously while keeping the user experience frictionless (under 2 seconds for generation). Designing the "zero-knowledge self-destruct" mechanism without violating financial audit trail requirements took intense architectural planning.
🚀 What's next for PortalX
We plan to fully deploy the Enterprise API and expand our RevenueCat subscription tiers to include "Family Privacy" plans. We also aim to integrate hardware-level secure enclaves on mobile devices for faster biometric processing.
Built With
- api
- artificial-intelligence
- biometrics
- cryptography
- github
- machine-learning
- python
- revenuecat
- saas
- security
Log in or sign up for Devpost to join the conversation.