Aadhaar details are sensitive personal information protected by law, and businesses cannot simply look up a person's Aadhaar data from a number. DigiLocker — the government's digital document wallet — provides a consent-based way for people to share verified documents, including Aadhaar details, with businesses that need them.
The flow
- Your app creates a verification request through the API and receives a link.
- The user opens the link and signs in to DigiLocker with their own credentials and OTP.
- The user reviews and approves sharing the requested document with your business.
- Your server fetches the verified details using the request identifiers.
The user stays in control at every step, and nothing is shared without their approval.
What you receive
Verified details as issued — typically name, date of birth, gender, address and photograph from the Aadhaar record. The same approach can fetch other documents held in DigiLocker, such as a PAN card, where supported.
Why consent-based verification is the right approach
It respects the user's privacy, gives businesses a clear record of consent and reduces the risk of collecting or storing data improperly. It also avoids relying on photocopies, which are easily misused.
Designing a good experience
- Explain in one sentence why you need the verification and what will be shared.
- Make the DigiLocker step easy to return from on mobile.
- Show clear progress and handle cancellations gracefully.
- Offer an alternative route for users who cannot use DigiLocker, where your process allows.
Storing data responsibly
Store only what you need for your purpose. Restrict access to staff who need it, encrypt sensitive fields, and follow applicable rules on masking and retention. Regulated entities must follow the specific requirements that apply to them.
See our Aadhaar verification via DigiLocker API, with a two-step request-and-fetch flow.
0 comments