You decide
who sees your identity.
And how much of it.
Today you hand over a copy and hope. With AQAV a business asks a question, you approve it on your phone, and it receives an answer — never your document.
Source: Swiss National Cyber Security Centre, 2025 review. AQAV’s own figures are design targets, never usage claims.
From a copy you give away to an answer you grant.
You hand over a photocopy
You grant one answer, and only one
A request lands. The gesture is yours.
The counter terminal on the left, your phone on the right. Nothing is sent anywhere — it all runs inside this page.
The terminal keeps a signed result and a timestamp. No image, no number — nothing to leak later.
Three steps. Target:
under three seconds.
The request arrives
At the counter, by QR or in the app. You see the company's name, what it wants and why.
You approve, or you don't
Face ID and a security question confirm it's really you. Refusing is a normal choice, not an incident.
Only the answer travels
Yes or no, signed and timestamped. The document stays in your encrypted vault, and the approval expires on its own.
THE BUSINESS
The request arrives
At the counter, by QR or in the app. You see the company’s name, what it wants and why.
You approve, or you don’t
Face ID and a security question confirm it’s really you. Refusing is a normal choice, not an incident.
THE ANSWER
Only the answer travels
Yes or no, signed and timestamped. The document stays in your encrypted vault, and the approval expires on its own.
Four design decisions.
None of them cosmetic.
An answer, not a document
The business learns what it is entitled to know. Not the file, not the number, not your date of birth if age is enough.
Duress passcode
If you’re forced to unlock your phone, a second code opens a believable empty profile and quietly alerts a trusted contact.
Signed by the issuer
A diploma signed by the university itself can be neither self-declared nor retouched. Trust comes from the signature, not from our word.
Approvals that expire
Every approval has a scope, a duration and sometimes a place. It expires on its own: at the set minute, or when you leave the counter.
The code you give when
you have no choice.
shown on purpose.
The screen looks normal, just empty: no documents, no history. Nothing hints that a second profile exists — even the sound is identical.