Design a cloud-based customer identity verification platform
PremiumSecurity systemHard
- Workflow orchestration
- Third party integration
- Security
Quick answer
This security system interview question asks you to design a cloud-based customer identity verification platform. Aim for a design that protects users and data without blocking legitimate use, then explain the threats, controls, detection and trade-offs. Interviewers want to see how you model threats and layer defences.
The problem
Design a cloud-based Customer Identity Verification (KYC) Platform. Downstream tenant applications generate a verification session, and the end-user uploads their identity documents and a short selfie video. The platform must securely ingest this media, orchestrate verification checks (OCR, biometric face-matching, global watchlists) via external providers, and reliably deliver the final decision to the tenant application via a webhook.
What must a cloud-based customer identity verification platform do?
- Media Ingestion: Securely receive high-resolution identity documents and selfie videos from end-users.
- Verification Orchestration: Execute OCR, face-matching, and watchlist checks using external third-party APIs.
What scale should you design for?
Use these numbers in your estimates.
The scale numbers unlock with this questionUnlock
Key concepts
- Workflow orchestration
- Third party integration
- Security
- Async processing
- Rate limiting
- Large payloads
How you’ll practise
- Requirements and assets
- Threat model
- Identity and access
- Data protection
- Detection and response
- Wrap-up
Lala, personalized to you, gives a hint when you ask and reviews your design when you are ready.
What do interviewers look for?
In any security system design round.
- Starts with a clear threat model
- Layers defences instead of relying on one control
- Covers authentication, authorisation and secrets
- Plans detection, alerting and response
- Protects data in transit and at rest
- Balances security against usability and cost
Questions people ask about this interview question
- Which design type is this question?
- It is a security system question. You design a cloud-based customer identity verification platform and explain your choices the way you would in an interview.
- Is this question asked at entry level?
- It is marked Hard. It suits engineers preparing for senior interviews, where you are expected to drive the discussion and go deep on trade-offs.
- What should I cover first?
- Start with what must be protected, from whom and what a breach would cost. Agree on scope with the interviewer before you design anything.
- Can I practise it for free?
- It is a premium question. Sign up and unlock it once for 10 credits; it then stays unlocked. When you finish, Lala, your personalized AI mentor, can review your design for 30 credits.
Related questions
Updated · Written by the SevyDevy team