HTML / JavaScript

<script src="https://js.vouchmark.com/v1/vouchmark.js" async></script>

<button id="start-kyb">Verify your business</button>

<script>
  document.getElementById("start-kyb").addEventListener("click", function () {
    Vouchmark.open({
      widgetId: "wgt_your_widget_id",
      publicKey: "live_pk_your_public_key",
      environment: "live",
      applicant: {
        email: "applicant@example.com",
        businessName: "Acme Ltd",
        registrationNumber: "RC123456",
      },
      onSuccess: function (applicant) {
        console.log("Approved:", applicant.id, applicant.riskScore);
      },
      onAbandon: function () {
        console.log("Applicant closed the widget");
      },
      onError: function (error) {
        console.error("Widget error:", error.code, error.message);
      },
    });
  });
</script>

// Server-side (Node.js example)
import { Vouchmark } from "@vouchmark/node";

const vouchmark = new Vouchmark({ secretKey: process.env.VOUCHMARK_SECRET_KEY });

const session = await vouchmark.sessions.create({
  widgetId: "wgt_your_widget_id",
  environment: "live",
  applicant: { email: "applicant@example.com" },
});

// Return session.token to the client

<script>
  Vouchmark.open({
    widgetId: "wgt_your_widget_id",
    publicKey: "live_pk_your_public_key",
    environment: "live",
    sessionToken: "sess_signed_token_from_server",
    onSuccess: function (applicant) { /* ... */ },
  });
</script>

script-src 'self' https://js.vouchmark.com;
frame-src 'self' https://widget.vouchmark.com;
connect-src 'self' https://api.vouchmark.com;