Inspiration

What it does

How we built it

Challenges we ran into

Accomplishments that we're proud of

What we learned

What's next for PortalX

💡 Inspiration

In today's digital age, physical ID cards and static KYC documents leave a permanent, vulnerable data trail. Inspired by the concept of "self-destructing messages," we wanted to build a Universal Temporary Identity Layer. The goal was to give users complete control over their identity by ensuring their data exists only for the exact duration of a transaction, completely eliminating the risk of data breaches.

⚙️ What it does

PortalX is a NextGen Ephemeral Identity Layer. Instead of sharing a physical ID, users generate a time-bound "Secure Enclave" authenticated via 3-Factor Biometric Convergence (Retina, Voiceprint, and Liveness). Once the verification timer expires, the identity packet self-destructs completely, leaving zero data trail.

💰 Business Model (RevenueCat Integration)

To make PortalX a sustainable business, we designed a highly scalable SaaS model using RevenueCat:

  • PortalX Pro (B2C): Basic ephemeral IDs are free. Users can upgrade via RevenueCat in-app subscriptions to unlock premium features like extended token lifespans, multi-device identity sync, and advanced privacy audit logs. RevenueCat makes handling these cross-platform subscriptions seamless.
  • Enterprise API (B2B): Businesses pay a tier-based subscription to access our verification API, allowing them to verify users without the liability of storing KYC data.

🛠️ How we built it

We architected the system to achieve strictly enforced OWASP MSTG-L2 compliance. A massive part of our engineering went into mapping the architecture to comply with 11 major regulatory frameworks, including RBI, NPCI, PCI DSS, FIU-IND, UIDAI, and the DPDP Act. We built automated Python scripts to generate our Master Compliance Architecture dossier.

🚧 Challenges we ran into

The biggest challenge was architecting a system that satisfies 11 different legal and regulatory authorities simultaneously while keeping the user experience frictionless (under 2 seconds for generation). Designing the "zero-knowledge self-destruct" mechanism without violating financial audit trail requirements took intense architectural planning.

🚀 What's next for PortalX

We plan to fully deploy the Enterprise API and expand our RevenueCat subscription tiers to include "Family Privacy" plans. We also aim to integrate hardware-level secure enclaves on mobile devices for faster biometric processing.

Built With

Share this project:

Updates

Submission history