Uniken is a digital identity and security company that now trades as Ditto. Its Ditto ID platform helps banks, fintechs and other consumer-facing businesses onboard customers, verify who they are, log them in without passwords and protect the mobile apps they use.
The problem it addresses is fraud and account takeover across the customer journey, from the first onboarding check to every later login and payment, handled by one vendor instead of several point tools.
At A Glance
| Vendor | Uniken (now Ditto) |
|---|---|
| Category | Identity verification, authentication and mobile threat defence |
| Identities covered | Customers and end users, their devices and mobile apps |
| Deployment | Cloud-native SaaS, hybrid, or fully on-premises |
| Certifications | ISO 27001, SOC 2 |
| Partners | Temenos, Infosys Finacle, LTIMindtree |
| Market classification | Identity Verification |
What Uniken Does
Ditto ID is built as a single orchestration layer for onboarding, authentication and threat defence. Its design removes shared secrets: credentials are cryptographically bound to the user’s device using a patented split-key protocol, and the cryptography is agile, so algorithms can be swapped as standards change.
Risk signals are shared across the platform, so a routine passkey login can be stepped up to split-key authentication when risk rises. The company sells into banking and payments, crypto and fintech, travel and accommodation, gambling and gaming, and education.
Products
Protect
Protect is for app owners whose customers use phones the business does not control. It spots jailbroken or rooted devices, tampering, malware, emulators and unsafe operating system conditions in real time, and its runtime app protection (RASP) blocks code injection, hooking, debugging and reverse engineering. It also catches overlay screens, keyloggers and session-hijacking tools, and uses secure enclave and hardware-backed attestation on Android and iOS.
Verify
Verify answers the question “is this a real person with a real document?” during onboarding. It runs document checks on identity documents, plus face liveness and face-match checks with passive liveness detection, so the customer does not have to perform gestures in front of the camera.
Authenticate
Authenticate replaces passwords with device-bound cryptography. Login is built on “zero-knowledge proof verification”, combined with split-key cryptography, mutual authentication between app and server, and trusted device signals. Payments and other sensitive actions can be signed with a private key held on the user’s device, and multi-tenant setups can apply separate authentication policies per tenant.
EUDI Orchestration
Also known as EUDI Attest, this module prepares businesses for EU digital identity wallets. It accepts wallet-based identities and verifiable attestations and supports selective disclosure, for example proving that a customer is over an age threshold without revealing the document behind it.
How It Works
Ditto ID can run as cloud-native SaaS, as a hybrid of on-premises and cloud, or fully on-premises where data residency requires it, with multi-region rollouts supported.
| Component | What it does |
|---|---|
| Client SDK | Lightweight mobile SDKs handle biometric capture, device hardening and document capture inside the customer’s app. |
| REL-ID Gateway | Also called the Ditto Authenticate Gateway, it validates split keys and enforces trust continuously during a session. |
| Secure Channel Gateway | Provides “encrypted, mutually authenticated communication” between the app and the business backend. |
| APIs | The platform is API-first, with APIs for risk scoring, device attestation and session validation and a developer sandbox for testing. |
Identities And Systems Covered
| Customers and end users | Onboarding, identity verification and passwordless login. |
|---|---|
| Devices | Integrity checks, attestation and trusted device signals on Android and iOS. |
| Mobile apps | Runtime protection against injection, hooking and reverse engineering. |
| Wallet identities | EUDI wallet identities and verifiable attestations. |
Company Background
| Headquarters | London, United Kingdom (Ditto.ID Ltd, Shoreditch). |
|---|---|
| Scale | More than 1 billion reported devices protected and identities verified. |
| Recognition | Included in the KuppingerCole 2026 Leadership Compass for Identity Verification. |
Note: This overview is compiled from Uniken’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.