What it is
A visitor taps a button, speaks for a few seconds, and the website receives a decision. No government ID. No facial scan. No account. The interaction takes under thirty seconds and works on any device with a microphone.
It runs inside a sandboxed iframe, so your site never touches the voice data. We process it, return the result, and delete everything within an hour.
The regulatory landscape
Age verification is fast becoming a requirement online. US states, the UK, the EU, and Australia now demand more than a checkbox. The question is not whether to verify, but how.
ID upload asks users to hand government documents to a website they may never visit again. And when a verification vendor is breached, every stored document is compromised at once. Storing documents creates the liability.
Facial scanning works, but it builds infrastructure that outlasts the check. A system that estimates your age today can identify you tomorrow. Platforms that rolled it out met immediate backlash and reversals. Users do not trust platforms with their face.
Self-declaration, the "I am over 18" checkbox, is explicitly prohibited by every major regulator in the UK, EU, and Australia.
How AGEWARDEN works
We examine pitch, cadence, and vocal patterns that correlate with age. The result is binary: old enough, or not.
Audio is encrypted, processed, and permanently deleted.
No voiceprints. No speaker profiles. We keep only an anonymous log that a verification happened. No audio, no identifying information.
The website receives a yes or a no. That is the entire exchange.
What we don't do
Integration
Cross-origin iframe with process-level isolation. Site key and secret key authentication with server-side domain validation. TLS 1.3 in transit. The client site never touches the microphone feed.
Pricing
Graduated bands. The more you verify, the less each one costs. No setup fees. No minimums. No seats.
A card at signup, nothing charged upfront. The first hundred verifications are free. After that, one bill a month for exactly what you used. Failed runs, retries, and test traffic never count.