AuthUser strategic roadmap: from MVP to European infrastructure
AuthUser’s strategic roadmap explains how we move from a validated concept to a European age-verification infrastructure built around privacy-first principles and fraud resistance.

Punto actualPhase 0 — Minimum technical validation
The immediate goal is to turn the concept into a verifiable product in a controlled real-world environment.
Key deliverables:
- Functional MVP for the full flow: SMS → document → liveness → age token.
- Privacy-first architecture: no permanent biometric storage, identity/age-result separation, and token expiration.
- Anti-fraud threat model for deepfakes, replay attacks, device spoofing, and synthetic documents.
- First downloadable technical whitepaper.
Exit KPIs:
- 3–5 interested pilot platforms.
- End-to-end flow running in limited production.
Phase 1 — Real pilots and market signal
The focus is proving that AuthUser solves a real problem for platforms facing regulatory and operational risk.
Deliverables:
- Minimum public SDK/API with REST + verification result webhook.
- Basic dashboard with verification status, conversion metrics, and fraud logs.
- Privacy-safe telemetry: completion rate, verification time, and step-level drop-off.
- Integrator documentation.
KPIs:
- 10k real verifications.
- ≥70% completion rate.
- ≥2 customers willing to pay for a pilot.
Phase 2 — Strong EU/UK compliance
This phase aims to establish AuthUser as a serious regulatory provider for high-requirement markets.
Deliverables:
- Documented legal framework: GDPR DPIA, DSA alignment, and UK Online Safety Act.
- Certifications/audits: ISO 27001 (planned), external pentest, and a public responsible disclosure policy.
- Reusable age token for proof-of-age without re-verifying identity every time.
- Standard B2B contracts.
KPIs:
- First enterprise customer.
- Legal approval for use in a regulated platform.
Phase 3 — Product scale
The goal is to evolve from an operational tool to verification infrastructure.
Deliverables:
- Multi-platform SDK for Web, iOS/Android, and backend-to-backend.
- Delegated verification/wallet with reusable age credential and possible eIDAS 2.0 alignment.
- Advanced anti-fraud engine: risk scoring, pattern detection, and per-device rate limiting.
- Clear SaaS pricing: per verification and per verified MAU.
KPIs:
- 100k–1M verifications.
- Positive unit economics.
Phase 4 — European positioning
The final phase aims to make AuthUser the privacy-first age-verification standard in Europe.
Strategic lines:
- Integration with adult content platforms, iGaming, and app stores/social networks.
- Regulatory participation in EU working groups and technical standards.
- Technology moat through reusable age proof and zero-knowledge/selective disclosure approaches.
Expected outcome:
- Potential acquisition.
- Or an independent regulatory infrastructure.
Closing
This roadmap is more than a timeline of milestones: it is a plan to balance security, compliance, and user experience in age verification at scale.
In upcoming posts, we will share progress by phase, technical decisions, and implementation learnings.