Full Data Sovereignty.
5-Minute Deploy.
Run Deep-Check entirely on your own infrastructure. Your biometric data, your documents, your employees' faces — none of it ever leaves your network. Not even in encrypted form.
Architecture: Zero Trust Boundary
Your Server (Docker Compose) — nothing crosses this boundary:
┌──────────────────────────────────────────────────────────────┐ │ YOUR SERVER (Docker Compose) │ │ │ │ ┌─────────────────┐ ┌──────────────────────────────┐ │ │ │ nginx (TLS) │ ───▶ │ Next.js App (port 3000) │ │ │ │ port 80/443 │ │ │ │ │ └─────────────────┘ │ • Deepfake CNN (ONNX/WASM) │ │ │ │ • ELA/EXIF forensics │ │ │ │ • MRZ parser (offline) │ │ │ │ • Face match (MediaPipe) │ │ │ └──────────┬───────────────────┘ │ │ │ PostgREST API │ │ ┌──────────▼───────────────────┐ │ │ │ PostgreSQL 16 │ │ │ │ (audit logs, assessments, │ │ │ │ document analyses) │ │ │ └──────────────────────────────┘ │ │ │ │ ┌──────────────────────────────────────────────────────┐ │ │ │ ML Worker — EfficientNet (Python, port 8001) │ │ │ │ Server-side pixel forensics (ONNX) │ │ │ └──────────────────────────────────────────────────────┘ │ │ │ │ ↕ Zero data leaves this box ↕ │ └──────────────────────────────────────────────────────────────┘
Face match
Browser (MediaPipe WASM)
Deepfake CNN
Browser (ONNX Runtime)
Document ELA/EXIF
Browser (Canvas API)
MRZ parsing
Server (offline regex)
Audit logs
Your PostgreSQL
ML inference
Your ML Worker container
Deploy in 3 Steps
From zero to production-ready in under 5 minutes. Requires Docker Engine 24+.
Run the one-line installer
Generates all secrets automatically and starts the Docker stack.
curl -fsSL https://deep-check.io/install.sh | bashOr: git clone https://github.com/deepcheck/deepcheck && bash install.sh
Wait ~2 minutes
Docker pulls the images, builds the app container, and starts the database. The installer waits for all health checks to pass before printing your credentials.
Open your dashboard
Navigate to http://your-server/dashboard and log in with the generated admin password. Change it immediately in Settings.
195 Countries · Universal Coverage
ICAO 9303 MRZ verification for every passport-issuing nation. Country-specific document validators with algorithmic check-digit validation.
Tier 1 Countries — Full Algorithmic Validation
+ 40+ countries with format validation · All 195 countries supported via universal MRZ + passport number verification.
Built for Regulated Environments
Air-Gap Compatible
All ML models are bundled in the Docker image. The platform runs with zero outbound internet connections after setup.
GDPR Article 25
Privacy by Design and by Default. No biometric templates stored. No face embeddings persisted. Processing happens in the browser.
Tamper-Evident Audit Chain
Every session event is hashed into a SHA-256 chain. Any modification to audit logs is cryptographically detectable.
No Biometric Storage
Face match runs entirely in the browser via MediaPipe WASM. The server never processes or stores face embeddings.
EU AI Act Ready
Human oversight mechanisms, confidence scores with explanations, and full XAI breakdowns on every decision.
Source Code Access
Enterprise customers receive the full source code. Audit it, modify it, and integrate it into your compliance workflow.
On-Premise vs Cloud SaaS
| Capability | On-Premise | Cloud SaaS |
|---|---|---|
| Data stays on your network | ✅ Always | ❌ Cloud-hosted |
| Biometric data transmission | ✅ None | ⚠️ Encrypted |
| Air-gap / offline operation | ✅ Full support | ❌ Requires internet |
| GDPR Art. 25 compliance | ✅ Guaranteed | ⚠️ Depends on config |
| Custom ML model integration | ✅ Full access | ❌ Locked |
| Source code audit | ✅ Included | ❌ Not available |
| SSO / LDAP / Active Directory | ✅ Configurable | ❌ Not included |
| SLA with dedicated support | ✅ Enterprise SLA | ⚠️ Standard SLA |
| Database backup control | ✅ You own it | ⚠️ Provider backup |
| Cost at scale | ✅ Fixed infra | ❌ Per-use pricing |
System Requirements
Minimum
Recommended (Production)
Ready to deploy on your own infrastructure?
Enterprise plan includes on-premise Docker package, dedicated onboarding call, SLA, and source code access.
Response within 24 hours · Custom pricing based on seats and deployment size