Get the current state of one verification session. Use it to poll a session, and to recover a result after a webhook delivery fails. A session that belongs to another business answers exactly like a session that does not exist. This endpoint stays available even when Signa is disabled for your business. Required scope: compliance-kyc:read.
Authorization
oauth2ClientCredentials compliance-kyc:readUse your OAuth client credentials to obtain a short-lived Bearer token from POST /oauth/token.
In: header
Scope: compliance-kyc:read
Path Parameters
The verification session id returned by the create endpoint.
uuidResponse Body
application/json
application/json
application/json
application/json
curl --request GET \ --url 'https://example.com/api/external/compliance/kyc/sessions/9f2c7b41-6d3e-4c8a-9a20-1e6f0b5d7c33'{ "message": "Verification session retrieved successfully.", "data": { "id": "3b81f0d5-9c47-42ae-b6e1-7d2a5c9f4801", "business_id": "9d4c4ec5-572d-49de-a362-f01ed09f2b1b", "customer_reference": "user_10513", "requirements": [ "DOCUMENTS" ], "fulfilment_mode": "HEADLESS", "status": "REJECTED", "steps": { "documents": "SUBMITTED", "selfie": null, "proof_of_address": null }, "rejection": { "reason": "The document image is too blurred to read.", "type": "RETRYABLE" }, "expires_at": "2026-08-30T09:14:22.000Z", "completed_at": "2026-08-29T11:02:44.000Z", "created_at": "2026-08-29T09:14:22.000Z" }}GETList verification sessions
List the verification sessions of your business. The listing is always scoped to the business behind your access token. This endpoint stays available even when Signa is disabled for your business. Required scope: `compliance-kyc:read`.
POSTCreate a document upload URL
Get a presigned URL for one document, then send the file to it with an HTTP PUT, then register the file on the documents endpoint. Use this transport for every real document: a request body larger than about 8 KB is rejected at the network edge. The URL is valid for 5 minutes and the staged file must be 5 MB or smaller. The session must be HEADLESS. A HOSTED session refuses the call with a 422, because the end customer supplies the documents on the verification link. Signa must be enabled for your business. Required scope: `compliance-kyc:create`.