January 22nd, 2026
Dear Customer,
In support of Zenpli’s security governance program and as part of our SOC 2 Type II audit, we will conduct a scheduled third-party penetration test of the Zenpli Platform.
The penetration test will be conducted in a controlled, low-intensity manner, with continuous monitoring to reduce the likelihood of service disruption. No material impact to platform availability or customer operations is anticipated.
Scheduled testing window:
📅 Friday, the 23rd through Friday, the 30th
No action is required from your organization at this time.
Should you observe any anomalous behavior or require clarification during the testing window, please submit a request through our Service Desk using the following link:
👉https://zenp.li/rzT
Sincerely,
Sincerely / Atentamente,
Cesar Berho
Co-Founder & CTO
October 23rd, 2025
New
Penny Validation API
We’re launching Penny Validation API, a fast way to verify Mexican bank accounts (CLABE), confirming name, RFC, and CURP, with built-in sanctions and PEP checks.
As part of Tech Week Mexico 2025, we are excited to introduce Penny Validation API, the newest addition to Zenpli’s Identity Verification suite.
This API enables businesses to verify the ownership of a Mexican bank account (CLABE) through a symbolic micro-transfer. It confirms key identity attributes — name, RFC, and CURP — directly with financial institutions, while also checking against sanctions and PEP lists.
Key benefits:
🔒 Strengthened compliance: aligns with AML/KYC obligations for financial institutions across Mexico and LATAM (soon).
⚡ Frictionless experience: bank-backed verification completed in seconds.
📈 Scale with confidence: reduce fraud exposure and expand operations with trust.
Technical highlights:
Asynchronous validation of the micro-transfer via SPEI.
CEP URL: direct access to BANXICO’s official verification page.
Webhook notifications, providing full traceability and supporting retries in certain scenarios.
Smart attribute matching for name, RFC, and CURP.
Integrated screening against SAT 69a/69b, AML, and PEP lists. Covering nearly 1,300 global watchlists.
🔗 Full API documentation will be published soon on our Developer Platform.
September 12th, 2025
New
Lucy KYB API Suite
1. Chile Market Enablement
Lucy now supports KYB verification processes in Chile, enabling our customers to expand operations and ensure compliance in a new market. This marks a strategic milestone in Zenpli’s regional growth.
2. Structured Outputs
We’ve introduced structured outputs that enhance communication between the verification engine and backend systems. This improvement ensures more consistent and reliable data processing, laying the groundwork for enabling additional countries and use cases.
What does this mean for our customers?
A ready-to-use solution for business onboarding in Chile.
A technology foundation prepared to scale quickly into new markets.
Increased reliability in the information validated through the Lucy KYB API Suite.
Documentation and resources
Check out the full list of supported document types by market in our public documentation:
👉 Supported Document Types by Market
August 19th, 2025
Identity Score
New
We’ve added new insights to enhance fraud detection and identity verification across multiple vectors. These additions enable you to assess usage patterns, risk levels, and key associations for phone, email, IP, and identity data.
Key additions:
Phone
Days since first and last seen in the identity network
Disposable number detection, blacklist checks, and recent abuse flags
Risk score and registration location
Associations with full name and email
Email
Deliverability checks, recent abuse, and common pattern detection
Risk score, generic domain validation, and frequent complainer flag
User activity level, domain velocity, and associations with names and phone numbers
IP
Mobile carrier identification, MCC and MNC codes
IP risk score
Identity
List of full names linked to an email
Email ↔ full name match status
Phone ↔ full name match status
Phone ↔ email match status
Availability:
These new insights are available via API and in the Sandbox environment for easier testing and integration.
June 27th, 2025
Identity Score
New
We’ve added 2 new insights based on Mexico’s RFC (Registro Federal de Contribuyentes) to our national_id vector in Identity Score.
These signals assess the integrity and trustworthiness of an RFC by:
✅ Confirming RFC validity and presence in SAT records
📊 Returning a trustiness level (
HIGH,MID,LOW) based on the official SAT 69 Lists
These two RFC insights complement the existing 8 from CURP, completing the new 10-signal national_id vector for Mexico. Now available for all customers via the Identity Score API.
June 25th, 2025
Identity Score
New
We’ve launched 8 new insights derived from the Mexican CURP (Clave Única de Registro de Población) as part of our NEW national_id vector, now live in Identity Score.
These insights enable deeper identity verification and fraud detection from CURP structure and metadata. They include:
✅ Format and existence validation of the CURP
👤 Official metadata extraction: full name, birth date, gender, nationality, place of birth
🧠 Semantic validation of declared name vs. CURP-encoded name
⚠️ Status detection (active, inactive, or invalid CURPs)
These 8 insights form part of the broader 10-signal national_id vector and are now available to all customers via the Identity Score API.
June 11th, 2025
New
Security
Zenpli’s asynchronous API products now include a standardized callback mechanism with secure authentication options: RSA256, HMAC, or API Key. This enables safe and efficient communication back to your configured webhook endpoints.
Each async response sent by Zenpli can now be verified using your selected authentication strategy, ensuring data integrity, authenticity, and protection against attacks.
Applicable to async flows such as onboarding decisions or document extraction.
🛡️ We recommend RSA256 or HMAC for production environments.
📄 Technical details and language-specific examples are provided in the supporting documentation.
MVP-Zenpli Callback Flows-Junio25.pdf
1.2 MB• Document
June 9th, 2025
New
Lucy KYB API Suite
Lucy KYB API Suite now supports collection and automatic extraction from incorporation documents generated through Mexico’s “Tu Empresa en Línea” government platform. These documents are categorized in the API as "Simplified Articles of Association".
This release extends coverage for legal entity verification in Mexico by enabling structured data extraction from official incorporation records, including entity name, RFC (of legal representative), shareholders, tax domicile, and corporate purpose.
➡️ API Docs Reference:
June 2nd, 2025
New
Infrastructure
We’ve launched a new public status page to provide real-time visibility into Zenpli’s service availability and performance:
👉 https://status.zenpli.com
This new status site includes:
Live system status across all Zenpli products.
Real-time metrics on uptime and latency.
Historical data on incidents and maintenance events.
Subscription options for instant notifications via email or webhook.
This release is part of our continued efforts to improve reliability and transparency for all our customers.