Incode review: age assurance behind Chaturbate and Aylo

Which age laws Incode is configured for

Incode offers ready-made flows for US state age laws, the UK Online Safety Act enforced by Ofcom, Brazil’s Digital ECA, Australia’s Online Safety Act and EU rules, and counts more than 40 jurisdictions with age rules. One integration adjusts the methods and thresholds to where each visitor is.

For UK sites, Incode’s facial age estimation and document checks hold an ACCS certificate from July 2024, which Incode presents as evidence of compliance under the Online Safety Act. For US sites, age can also be confirmed against DMV records.

How the Incode age check works

Incode runs a waterfall, least invasive first:

1. Selfie age estimation in seconds, where most adults stop.
2. ID and live selfie, only for visitors close to the threshold.
3. Data checks where available: official records, phone, email or a digital ID, with no document.

The selfie buffer depends on the service and location. Incode’s own example for an 18+ site is a buffer of 3 to 4 years, so only a visitor estimated at 21 or 22 or older passes on their face alone. An on-device version keeps estimation and liveness on the phone, with no image leaving it, in under 5 seconds on average. The site gets back a yes or no, an estimated age or a date of birth, as configured.

In NIST’s 2024 face age estimation evaluation, Incode reports a mean absolute error of 3.0 years on application photos and 2.7 years for 6 to 17-year-olds.

Mobile driver’s licenses in Apple, Google and Samsung Wallet

In the US, Incode accepts mobile driver’s licenses from Apple Wallet, Google Wallet and Samsung Wallet, and the site requests only the fields it needs, such as an over-18 or over-21 flag. Incode registers the site with Google as a verifier on its behalf. Apple Wallet on the web requires the site’s domain to be approved first, which goes through an Incode representative.

What Incode does for Chaturbate

Chaturbate replaced its previous vendor with Incode to verify both broadcasters and viewers, and went live 5 days after signing. According to Incode’s case study, the checks run with no manual review and catch 99% of fraud. Rollouts followed new laws in Australia, the UK and Italy.

Incode’s adult page also shows Aylo, LiveJasmin, CAM4, CamSoda, Cherry.tv, Skokka, LoyalFans and JustForFans. For creators, Incode checks full identity with an ID, biometrics and government data before they can stream, publish or get paid, and adds deepfake and synthetic ID detection.

Does Incode keep your data?

For age checks, Incode says it acts as the site’s processor and deletes personal data no more than 24 hours after the session, whether or not a result is reached. Only the result is kept.

Its biometric data policy, which covers all Incode products, allows biometric data to be kept until its purpose is met or up to three years after the last interaction. Get the 24-hour rule in the contract.

How trustworthy is Incode?

Incode Technologies, Inc. has operated since 2015 from San Francisco, holds ACCS, SOC 2 Type II and ISO/IEC 27001 certifications, and is rated 5.0 out of 5 from 51 business reviews on G2. Those reviews come from companies that buy the service. For visitors who meet Incode on an adult site’s age gate, Incode’s Age Center explains each method and the deletion rule in plain language, and a site can link to it.

How much does Incode cost?

Incode publishes no prices, and quotes go through sales. A free trial ends after 14 days or 100 sandbox verifications, whichever comes first. A Shopify app covers age-gated checkout for stores. Incode also holds SOC 2 Type II and ISO/IEC 27001, iBeta level 3 liveness on iOS and Android, and a positive assessment from Germany’s KJM from June 2022.

Incode strengths and limitations