Location Verification Report: geolocation_checks Fields

Overview

The session decision returns the result of every Location verification step in two lists: geolocation_checks[] holds each step’s accepted attempt, and geolocation_attempts[] lists every attempt in order. Both are on GET /v3/session/{sessionId}/decision/ (see Retrieve session) and in the status.updated webhook. A workflow with no Location step returns null or an empty list for both.

GET /v3/session/{sessionId}/decision/
  --> { "geolocation_checks": [ { node_id, status, outcome, permission, latitude, longitude, accuracy_m, ... } ],
        "geolocation_attempts": [ { node_id, outcome, attempts, received_at, ... } ] }

`geolocation_checks[]`

One item per Location step (node_id), taken from its newest attempt.

{
  "node_id": "geolocation_1",
  "status": "Declined",
  "outcome": "outside_geofence",
  "permission": "granted_precise",
  "latitude": 48.8566,
  "longitude": 2.3522,
  "accuracy_m": 35.0,
  "accuracy_confidence": "p95",
  "measured_at": "2026-11-03T10:15:02Z",
  "age_seconds": 2,
  "source": "browser",
  "platform": "web",
  "sdk_version": null,
  "is_mock": null,
  "produced_by_accessory": null,
  "integrity": "unsupported",
  "country_code": "FR",
  "region_code": "FR-IDF",
  "city": "Paris",
  "geofence": { "enabled": true, "result": "outside" },
  "inside_geofence": false,
  "geofence_basis": "device",
  "inside_areas": [],
  "blocked_areas": [],
  "position_source": "device_and_ip",
  "anonymizers": { "vpn": false, "proxy": false, "tor": false, "spoofing": null, "emulator": null },
  "ip_distance_km": 0,
  "ip_distance_uncertainty_km": 12.4,
  "ip_consistent": true,
  "document_distance_km": null,
  "travel_excused": null,
  "consecutive_mismatches": 1,
  "attempts": 3,
  "consent": { "accepted_at": "2026-11-03T10:14:55Z", "version": "hosted-web-1", "locale": "en" },
  "warnings": [
    {
      "risk": "LOCATION_OUTSIDE_GEOFENCE",
      "log_type": "error",
      "short_description": "Device location outside the allowed area",
      "node_id": "geolocation_1"
    }
  ]
}

Field	Type	Description
`node_id`	string	The workflow node that produced the result, so a workflow with two Location steps stays readable.
`status`	string	`Approved`, `In Review`, `Declined` or `Not Finished`, resolved from the warnings.
`outcome`	string	What happened on the accepted attempt. See outcomes.
`permission`	string	What the system granted: `granted_precise`, `granted_approximate`, `denied`, `restricted`, `unavailable`, `timeout`, `dismissed` or `not_requested` (IP-only step).
`latitude`, `longitude`	number or null	WGS84 position. `null` when there is no position.
`accuracy_m`	number or null	Radius of uncertainty in metres.
`accuracy_confidence`	string or null	Confidence level of the radius: `p95` (web), `p68` (Android) or `unspecified` (iOS). Platforms differ, so it is recorded rather than normalised.
`measured_at`	datetime or null	When the device measured the position, by the device clock.
`age_seconds`	integer or null	Time between the measurement and the moment Didit received it.
`source`	string or null	`gps`, `fused`, `network`, `wifi`, `cell`, `browser`, `unknown`, or `ip` on an IP-only step.
`platform`	string or null	`web`, `ios`, `android`, `react_native` or `flutter`.
`sdk_version`	string or null	The SDK version that produced the position.
`is_mock`	boolean or null	The system reported a simulated position. `null` means the platform cannot tell (web), not `false`.
`produced_by_accessory`	boolean or null	iOS only: the position came from an external accessory.
`integrity`	string	Device attestation: `attested`, `not_attested`, `failed`, `unsupported` (web) or `not_determined`.
`country_code`, `region_code`, `city`	string or null	The place the position resolves to, worked out offline: ISO 3166-1 alpha-2, ISO 3166-2 and the nearest populated place. The city is a label for reviewers, never a rule input.
`geofence`	object	`enabled`, and `result`: `inside`, `outside` or `undetermined`. `result` is `null` when geofencing is off.
`inside_geofence`	boolean or null	`true` or `false`, and `null` when geofencing is off or the accuracy circle straddles a boundary.
`geofence_basis`	string or null	Which position the area verdict used: `device` or `ip`.
`inside_areas`, `blocked_areas`	array	`id`s of the allowed areas the whole accuracy circle is inside, and of the blocked areas it is inside.
`position_source`	string or null	The node’s `geolocation_position_source` when the attempt ran.
`anonymizers`	object or null	`vpn`, `proxy`, `tor`, `spoofing` and `emulator`, each `true`, `false` or `null` when the source cannot tell.
`ip_distance_km`	number or null	Distance to the IP location after both uncertainty radii are subtracted. 0 means they overlap.
`ip_distance_uncertainty_km`	number or null	The combined radius that was subtracted.
`ip_consistent`	boolean or null	`ip_distance_km` is within `geolocation_ip_distance_km`. `null` when either side is unknown.
`document_distance_km`	number or null	Distance to the geocoded document address. `null` when no address is on file.
`travel_excused`	boolean or null	Travel tolerance excused the distance. `null` when tolerance is off.
`consecutive_mismatches`	integer or null	On a final attempt, this check plus the same person’s earlier mismatches in a row.
`attempts`	integer	The number of the attempt.
`consent`	object or null	`accepted_at`, `version` and `locale` of the location notice the person accepted.
`warnings`	array	The step’s warnings.

`geolocation_attempts[]`

Every attempt of every Location step, oldest first, with the same measurement, uncertainty, area and distance fields as geolocation_checks[] except warnings, plus:

Field	Type	Description
`received_at`	datetime	When Didit received the attempt.
`created_at`	datetime	When the attempt was recorded.

Attempts a resubmission retired are left out. The raw client submission and the challenge are never returned.

Fields for status rules and branches

Custom status_rules and branch rules can read these fields: geolocation.status, geolocation.outcome, geolocation.permission, geolocation.latitude, geolocation.longitude, geolocation.accuracy_m, geolocation.accuracy_confidence, geolocation.age_seconds, geolocation.measured_at, geolocation.source, geolocation.platform, geolocation.country (ISO 3166-1 alpha-3), geolocation.region, geolocation.city, geolocation.is_mock, geolocation.integrity, geolocation.inside_geofence, geolocation.ip_distance_km, geolocation.ip_consistent, geolocation.document_distance_km, geolocation.attempts, geolocation.consent_at, geolocation.inside_areas, geolocation.blocked_areas, geolocation.anonymizers (vpn, proxy, tor, spoofing, emulator) and geolocation.consecutive_mismatches. A missing value matches only is_empty, so a rule written for a fraud signal never fires on missing data.

Location verification - how the step works and what it costs.
Location verification warnings - every LOCATION_* code.
Webhooks - status.updated carries the lists.
Data models - Warning object - the shape of every entry in warnings[].

Authentication

Verification

Monitoring

Platform

Location Verification Report: geolocation_checks Fields

Overview

`geolocation_checks[]`

`geolocation_attempts[]`

Fields for status rules and branches

​Overview

​geolocation_checks[]

​geolocation_attempts[]

​Fields for status rules and branches

​Related

Overview

`geolocation_checks[]`

`geolocation_attempts[]`

Fields for status rules and branches

Related