Vouched Assure
Vouched Assure re-proves the same person at the moments risk rises: when they recover an account, reset a password, step up a login or come back months later. No starting over, and no help desk call a stranger can talk their way through.
Why Assure
Most identity vendors sell you the front door. The expensive problems live in everything that happens after it.
Password resets and account recovery that run through a human help desk are the most socially engineered route into an account.
When the phone or the email is the thing that’s gone, sending a code to it proves nothing. Re-prove the person instead.
Four of the five moments in the account lifecycle happen after onboarding. Each deserves the same assurance as the first.
What’s in Vouched Assure
Every Assure capability re-proves the person you already verified, so the identity behind the account stays the same from sign-up onwards.
When a phone is lost, an email is compromised or an authenticator is gone, the person re-proves who they are with a live selfie, not a call to the help desk.
Self-service password reset that proves it’s the account owner, so a convincing caller can’t talk their way in.
A biometric check at high-risk moments, such as a new device, a large transaction or a change to account details.
Re-verify a returning user after time away, or before sensitive access, against the identity they already established.
When your system flags possible duplicate records, Vouched compares the faces on them, from selfies or ID photos, and tells you how likely they are to be the same person.
How it works
Vouched Verify confirms identity at enrollment: a digital or government-issued ID, matched to a live selfie.
Vouched VerifyA lost factor, a reset request, a risky action or a return after time away triggers Assure in your flow.
A live selfie is checked for liveness and matched to the identity established at enrollment.
Across the account lifecycle
Verify establishes identity once. Assure carries it through every recurring moment. Know Your Agent extends it to the agents acting for people.
Establish who a new patient, customer or employee is.
Vouched Verify →Re-establish trust when the phone, the email or the factor is gone.
You’re hereReset a password or raise assurance at the moment risk rises.
You’re hereConfirm whether records flagged as duplicates are the same person.
You’re hereTie an AI agent’s permissions to a person you’ve verified.
Know Your Agent →Who uses it
Account recovery and password reset for patient portals, without routing patients through the help desk.
Health systems →Recovery and step-up by API, for patients who change phones between visits.
Telehealth →Step-up before high-risk account changes, confirmed by the real account owner.
Financial services →Trust
Recovery is a security control, so it’s held to the same standard as the rest of the platform.
Visit the Trust CenterFor developers
Assure runs on the same API as Vouched Verify. You pick the workflow, Vouched returns one decision with every check behind it, and your flow carries on.
Read the docs
// Re-prove a returning user before restoring access.
POST /verifications
{
"workflow": "account_recovery",
"subject": { "id": "usr_8f2…" }
}
// One decision, and every check behind it.
{
"decision": "verified",
"checks": {
"liveness": "pass",
"face_match_to_enrollment": "pass"
}
}FAQ
Straight answers about account recovery, password reset, step-up and matching with Vouched.
Contact us with a questionVouched Assure re-proves that a person is who they say they are at the moments after onboarding when trust has to be re-established: account recovery, password reset, step-up MFA, re-authentication, and review of records flagged as possible duplicates. Its promise is simple: prove it’s still them.
Vouched Verify establishes identity, usually once, when someone signs up. Vouched Assure re-proves that same identity at the moments that recur afterwards, such as recovering an account, resetting a password or approving a high-risk change, without making the person start over.
Identity-based account recovery lets someone regain access by proving who they are, not by answering questions or receiving a code on a phone or email they may have lost. With Vouched Assure, the person takes a live selfie that’s checked for liveness and matched to the identity established when they enrolled.
Password resets and account recovery that run through a human help desk are the most socially engineered route into an account: a convincing caller can talk an agent into resetting access. Self-service recovery that re-proves the person’s identity removes that route and the cost of handling the call.
When a moment of risk triggers Assure, the person takes a live selfie. Vouched checks it for liveness, so a photo, screen or deepfake can’t pass, and matches it to the identity established at enrollment with Vouched Verify, then returns a decision: verified, review or rejected.
Step-up MFA adds a stronger check at the moment risk rises, such as a login from a new device, a large transaction or a change to account details. Vouched Assure makes that check biometric, so the real account owner confirms the action.
Re-authentication confirms a returning user is still the same person, for example after a period of inactivity or before access to sensitive information, by matching them to the identity they established when they enrolled.
Vouched doesn’t find duplicates; your EMPI, master data management system or registration team does. When records are flagged as possible duplicates, Vouched vectorizes the face on each one, from a selfie or the photo on an ID, compares the faces and returns how likely they are to belong to the same person. The records don’t need to have been verified with Vouched.
No. Vouched Assure re-proves people against the identity they already established with Vouched Verify, so they don’t repeat onboarding each time trust has to be re-established.
Yes, as an option. Vouched has Kantara Initiative Ready to Operate approval for NIST SP 800-63A Identity Assurance Level 2 (IAL2). Where a moment must meet IAL2, such as account recovery, Vouched can enable an IAL2 workflow on your account that re-proves the person with a government-issued ID and a live selfie matched to it. See the IAL2 guide in the API docs.
Organizations where a taken-over account is costly: health systems protecting patient portals and help desks, telehealth providers whose patients switch devices, and financial services firms approving high-risk account changes.
Talk to sales to set up the Assure workflows your organization needs. If you already use Vouched Verify, Assure builds on the identities you’ve established.