Built for regulated ecommerce

Customer verification and compliance for regulated ecommerce

Verify real customers, block risky transactions, and keep audit-ready evidence — without adding unnecessary friction to checkout.

Welcome real customers. Wave goodbye to fraud.

200+ countries Privacy-first verification Audit-ready logs
200+ countries· GDPR · CCPA · PIPEDA· 256-bit SSL· 4.9/5 G2 · 4.5/5 Capterra· Shopify · WooCommerce · BigCommerce · Magento · API· Audit-ready logs
The problem

Approving one customer shouldn't take five tools and a spreadsheet

If you sell regulated products online, your team is probably stitching verification and compliance together by hand. That's slow for you and clumsy for good customers.

⚠ Today's patchwork

ID verification vendor Age gate plugin Fraud tool Manual review queue Compliance spreadsheet Tax workflow PACT Act process Audit evidence folder

Eight places to check. Zero shared records. Risky orders slip through while good customers wait.

✓ One checkout-ready platform

Identity & age verification
Fraud & risk checks
AML, PACT Act & tax workflows
Manual review, in one queue
Audit evidence, logged automatically

Token of Trust replaces the patchwork of manual reviews, point solutions, and disconnected compliance workflows.

The customer experience

Verification that feels like a welcome, not a checkpoint

Good customers barely notice it. Risky ones don't get through. Your audit trail writes itself.

🛒

Checkout starts

A customer begins buying a regulated product.

🤫

Risk assessed quietly

Signals are checked in the background — no interruption.

🪪

Verify only if needed

ID or age check appears only when the product or risk requires it.

Good customers approved

Real buyers pass in seconds and keep their cart.

🚩

Risk flagged

Fraud and compliance risks route to review — not to fulfillment.

🗂️

Evidence logged

Every decision is recorded automatically, audit-ready.

🎉

Purchase continues

Checkout keeps moving. Conversion stays intact.

The platform

Everything you need to approve a customer, in one place

Four core capabilities, working from one set of records — so verification, risk, and compliance never disagree.

Identity Verification

Confirm who's doing the buying with government ID, selfie match, and data checks — so accounts and orders belong to real people.

Use it for: account opening, high-value orders, regulated purchases

Age Assurance

Verify age-restricted buyers without sending every good customer through the same heavy-handed flow.

Use it for: alcohol, tobacco & vape, age-restricted goods

Fraud Prevention

Spot risky behavior before it becomes chargebacks, abuse, or regulatory exposure — while real buyers glide through.

Use it for: checkout risk scoring, fake accounts, chargeback defense

Compliance Evidence & Audit Logs

Keep decision records, verification events, and review history ready for audits — in one place, exportable on demand.

Use it for: regulator requests, internal audits, dispute evidence
+ AML screening + PACT Act compliance + Sales, VAT & excise tax + Manual review queue
Who it's for

Built for ecommerce businesses where every transaction carries compliance risk

If a regulator, a card network, or a state law cares about who your customer is — Token of Trust was built for you.

Alcohol

Confirm legal drinking age at checkout and on delivery-adjacent flows, with records that satisfy state requirements.

Tobacco & vape

Age verification plus PACT Act registration, reporting, and excise tax handled in the same flow.

Age-restricted goods

Knives, CBD, lottery, gaming, and other 18+/21+ products — checks calibrated per product and jurisdiction.

Marketplaces

Verify regulated sellers and buyers without slowing onboarding, and keep evidence per account.

Financial services-adjacent

KYC-grade identity checks and AML screening for commerce that touches money movement.

High-risk ecommerce

High-value or fraud-targeted catalogs — stop risky transactions before fulfillment, not after the chargeback.

Implementation

Fits the store you already run

Pre-built ecommerce integrations for operators. A clean REST API and webhooks for developers. Verification can run at checkout, account creation, manual review, or post-purchase.

Shopify WooCommerce BigCommerce Magento WordPress NetSuite REST API
CheckoutAccount creationManual reviewPost-purchase
// One call covers identity, age, and AML — evidence logs automatically
const v = await tot.verifications.create({
  type: "checkout",
  checks: ["government_id", "age_21_plus", "aml_screen"]
});
// => { status: "approved", evidence_id: "ev_8841" }
Our promise

We will never sell your data. Ever.

Your customers hand you their identity at a sensitive moment. We treat that with respect: we collect only what each check requires, encrypt everything with 256-bit SSL, store it in compliance-ready systems, and keep your audit evidence available to you — and no one else.

Data minimization 256-bit SSL encryption Compliance-ready storage Customer consent & respect GDPR · CCPA · PIPEDA Audit-ready evidence
Outcomes

What regulated merchants actually get

−80%

"Manual reviews dropped from hours a day to a short queue. One platform replaced three vendors and our compliance spreadsheet."

Compliance lead · multi-state vape retailer
Conversion held

"We were terrified age checks would tank checkout. Most customers never even see one — flagged orders go to review, everyone else sails through."

Ecommerce director · online alcohol marketplace
Audit in minutes

"When the regulator asked for records, we exported the evidence log and were done. It used to take a week of digging across systems."

COO · regulated goods brand
4.9/5 G2
4.5/5 Capterra
FAQ

Questions regulated merchants ask us

How does Token of Trust reduce checkout friction?

Verification is risk-based: most customers are assessed quietly and never see a check. Verification appears only when a product, jurisdiction, or risk signal requires it, and good customers are approved in seconds — so conversion is preserved.

Can it support age-restricted products?

Yes. Age verification, age estimation, and age gates can be calibrated per product and jurisdiction — built for alcohol, tobacco and vape, and other age-restricted goods sold online.

What ecommerce platforms does it integrate with?

Pre-built integrations for Shopify, WooCommerce, BigCommerce, Magento, WordPress, and NetSuite, plus a REST API and webhooks for custom checkout, account creation, manual review, and post-purchase flows.

Can it support custom compliance workflows?

Yes. AML screening, PACT Act workflows, tax compliance, manual review queues, and custom decision rules can be combined through the dashboard or the API to match your compliance program.

What evidence is stored for audits?

Every verification event, decision record, and review action is logged with timestamps — audit evidence lives in one place and exports on demand, instead of being scattered across systems.

How does Token of Trust protect customer data?

We never sell customer data. Verification uses data minimization, 256-bit SSL encryption, and compliance-ready storage, and the platform is GDPR, CCPA, and PIPEDA compliant.

Is this for self-serve merchants or enterprise teams?

Both. Merchants can start free without a credit card, and enterprise compliance teams can book a demo for custom workflows, volume pricing, and vendor consolidation.

Get started

Verify customers. Reduce risk. Keep checkout moving.

Start free in minutes — no credit card required. Or book a demo and we'll map verification and compliance to your products, states, and risk profile.