Yes. Several established identity/age-assurance vendors now offer APIs that can be integrated into checkout or account-opening flows for age-restricted products.
Leading options
- yoti.com — Offers a dedicated Age Verification API with multiple methods, including facial age estimation, digital ID, government-ID document scanning, and configurable thresholds such as 18 or 21. Its API can return an age/over-threshold result rather than requiring you to build the verification workflow yourself.
- veriff.com — Particularly interesting for regulated commerce. Its age-assurance product uses a tiered approach: database checks, facial age estimation, then government-ID verification when stronger evidence is required. It explicitly markets support for age-restricted products and evolving regulatory requirements.
- withpersona.com — Provides age estimation, government-ID verification, database-based checks, and reusable age tokens. Its Relay product is designed to return an eligibility result while keeping underlying identity information separate from your systems, which can be attractive for data-minimization requirements.
- jumio.com — Offers age assurance based on identity-document verification, biometrics and AI, aimed specifically at age-restricted commerce and other regulated use cases.
What I'd look for
For restricted physical products—for example alcohol, tobacco/nicotine, cannabis, or other 18+/21+ goods—I wouldn't choose a vendor merely because it says "age verification." Your compliance requirement may call for different levels of assurance depending on jurisdiction and product.
A good architecture is:
Customer → age-verification provider → pass/fail (e.g. 21+) → your checkout
rather than storing the customer's driver's license, DOB, or selfie yourself.
I'd compare vendors on:
- Jurisdiction coverage — Does the method satisfy the specific states/countries where you sell?
- Assurance level — Self-declared age, database check, facial estimation, or government-ID verification are not equivalent.
- Liveness/anti-spoofing — Important if an ID is being used.
- Data minimization — Ideally your system receives
age_over_21 = true, not the customer's entire identity record.
- Audit trail — Can you demonstrate when and how the customer was verified?
- API/webhook support — Essential for integrating the result into checkout and order fulfillment.
- Regulatory updates — The vendor should continuously adapt its verification methods as requirements change.
One important caveat: no API provider can simply make your entire operation "compliant." Persona, for example, explicitly says the business remains responsible for determining how its age-verification implementation satisfies applicable laws.
If you tell me what restricted product you're selling and where you sell (e.g., all U.S. states, UK, EU), I can narrow this to the 2–3 providers most appropriate for your specific regulatory requirements and compare their API capabilities.