Process Overview
The complete CKYC lifecycle, automated end-to-end
From the moment a customer walks in to the CKYC number stored against their record — every step handled. Search, Download, Generate, Match, Store.
⚡Real-Time API ModeReal-Time
📦Managed Batch ModeManaged
✓CKYC 2.0 CompliantCKYC
🛡️ISO 27001 CertifiedISO
~0.2s
Search & Download TAT
Same Day
Generation submission TAT
2–5 Days
CERSAI processing TAT
Zero
Manual intervention
100%
Compliance
Delivery Models
Two modes, one platform — choose what fits your workflow
Both modes use the same CERSAI-compliant processing engine. The difference is how your institution connects to it.
⚡
API Mode (Real-Time)
Your system integrates our REST APIs directly. CKYC Search and Download complete in ~0.2 seconds. Generation is asynchronous — push data, poll for the CKYC number. Ideal for digital-first NBFCs and banks with modern onboarding platforms.
~0.2s for Search/DownloadJSON APITechnical integration
📦
Managed Batch Mode (SFTP)
HSS operationally manages your full CKYC batch lifecycle. No technical integration required. You share records and documents; we handle all CERSAI interaction, comparison, ZIP generation, and MIS reporting.
No integration neededSFTP-basedFully managed by HSS
Step-by-Step Process
The CKYC lifecycle, step by step
Every step in the process is automated, CERSAI-compliant, and audited. Here's exactly what happens from onboarding trigger to CKYC number storage.
1
Auto-triggered
CKYC Search API
The Search API queries the CERSAI registry using PAN, Aadhaar, CKYC Number, Voter ID, or Driving License. Returns a masked CKYC number in ~0.2 seconds if a record exists.
2A
If record found
CKYC Download API (OTP-based)
Two-step real-time download. Download Initiate requests the CKYC record from CERSAI; Validate OTP authenticates the customer. On success, the full unmasked record is returned in ~0.2 seconds.
2B
If no record found
CKYC Generation API
Your system pushes customer data and documents. Our AI extracts and validates data, auto-crops images to CERSAI spec, masks Aadhaar numbers, generates CERSAI-compliant encrypted XML, and submits to CERSAI same day.
3
Post download
Data Matching & Routing
Full match: CKYC number stored directly. Partial match: record routed to CKYC Update workflow automatically. Probable match: ML face matching resolves it — previously a 7-day manual process, now fully automated.
4
Complete
CKYC Number Stored — Lifecycle Complete
CKYC number stored against the customer record. FI code linked — you receive CERSAI unsolicited update notifications whenever the customer updates their KYC with any other institution.
Compliance at every step
🔒
RSA/OAEP encryption for all CERSAI transmissions
🎭
Aadhaar masking applied before submission
✅
Checker-Maker workflow automated
📋
Full audit trail with timestamps
🔄
CKYC 2.0 masked format handled automatically
TAT at a glance
Search API response~0.2s
Download API response~0.2s
Generation submissionSame day
CERSAI processing2–5 days
Data matchingInstant
CERSAI Processing Note: Once we submit the CKYC Generation record to CERSAI, the 2–5 business day processing time is CERSAI's internal queue. Our system polls automatically and notifies your system via the Status API the moment the CKYC number is assigned.
Mode Comparison
API Mode vs Managed Batch — which is right for you?
⚡API Mode | 📦Managed Batch | |
|---|---|---|
| Integration required | REST API integration | ✓ None required |
| Search TAT | ~0.2 seconds | Batch file turnaround |
| Download TAT | ~0.2 seconds | Batch file turnaround |
| Generation submission | Real-time push | HSS-managed SFTP upload |
| CERSAI portal access needed | ✓ No (we handle it) | ✓ No (we handle it) |
| Aadhaar masking | ✓ Automated | ✓ Automated |
| Data matching | ✓ Automated | ✓ Automated |
| MIS reporting | Via API responses | ✓ Detailed MIS reports |
| Best suited for | Digital onboarding, real-time workflows | Legacy portfolio, batch onboarding |
| Compliance guarantee | ✓ 100% | ✓ 100% |
Integration required
⚡
API Mode
REST API integration
📦
Managed Batch
✓ None required
Search TAT
⚡
API Mode
~0.2 seconds
📦
Managed Batch
Batch file turnaround
Download TAT
⚡
API Mode
~0.2 seconds
📦
Managed Batch
Batch file turnaround
Generation submission
⚡
API Mode
Real-time push
📦
Managed Batch
HSS-managed SFTP upload
CERSAI portal access needed
⚡
API Mode
✓ No (we handle it)
📦
Managed Batch
✓ No (we handle it)
Aadhaar masking
⚡
API Mode
✓ Automated
📦
Managed Batch
✓ Automated
Data matching
⚡
API Mode
✓ Automated
📦
Managed Batch
✓ Automated
MIS reporting
⚡
API Mode
Via API responses
📦
Managed Batch
✓ Detailed MIS reports
Best suited for
⚡
API Mode
Digital onboarding, real-time workflows
📦
Managed Batch
Legacy portfolio, batch onboarding
Compliance guarantee
⚡
API Mode
✓ 100%
📦
Managed Batch
✓ 100%
Many institutions use both modes — API for new onboarding and Managed Batch for existing portfolio remediation.
Regulatory Compliance
Every step meets CERSAI, RBI, SEBI, IRDAI & PFRDA requirements
✓
CERSAI CKYCRR 2.0 Requirements
✓Masked CKYC number format (post Jan 2025)
✓RSA/OAEPWithSHA256AndMGF1Padding encryption
✓CERSAI-specified XML schema generation
✓Checker-Maker dual-control workflow
✓OTP-based customer authentication for Download
✓Unsolicited update notification handling
✓Individual and Legal Entity KYC types
📄
Document & Data Requirements
✓Aadhaar number masking (last 8 digits) — mandatory
✓Photo auto-cropping to CERSAI dimension specs
✓Document type validation (Photo, Aadhaar, PAN, Voter ID, Passport, DL, NREGA)
✓Proof of Address + Proof of Identity combination rules
✓Image size ≤1MB, accepted formats: PDF, JPG, JPEG, PNG
✓Data validation, field character restrictions
✓Differently-abled flag and UDID handling
Ready to automate your CKYC workflow?
Talk to our CKYC experts to understand how we can integrate with your existing onboarding platform.