> ## Documentation Index
> Fetch the complete documentation index at: https://docs.didit.me/llms.txt
> Use this file to discover all available pages before exploring further.

# Location Verification Report: geolocation_checks Fields

> Parse geolocation_checks and geolocation_attempts in the session decision: position, accuracy, areas, distances, anonymizers, consent and warnings.

## Overview

The session decision returns the result of every Location verification step in two lists: `geolocation_checks[]` holds each step's accepted attempt, and `geolocation_attempts[]` lists every attempt in order.
Both are on `GET /v3/session/{sessionId}/decision/` (see [Retrieve session](https://docs.didit.me/sessions-api/retrieve-session.md)) and in the `status.updated` webhook.
A workflow with no Location step returns `null` or an empty list for both.

```text theme={null}
GET /v3/session/{sessionId}/decision/
  --> { "geolocation_checks": [ { node_id, status, outcome, permission, latitude, longitude, accuracy_m, ... } ],
        "geolocation_attempts": [ { node_id, outcome, attempts, received_at, ... } ] }
```

## `geolocation_checks[]`

One item per Location step (`node_id`), taken from its newest attempt.

```json theme={null}
{
  "node_id": "geolocation_1",
  "status": "Declined",
  "outcome": "outside_geofence",
  "permission": "granted_precise",
  "latitude": 48.8566,
  "longitude": 2.3522,
  "accuracy_m": 35.0,
  "accuracy_confidence": "p95",
  "measured_at": "2026-11-03T10:15:02Z",
  "age_seconds": 2,
  "source": "browser",
  "platform": "web",
  "sdk_version": null,
  "is_mock": null,
  "produced_by_accessory": null,
  "integrity": "unsupported",
  "country_code": "FR",
  "region_code": "FR-IDF",
  "city": "Paris",
  "geofence": { "enabled": true, "result": "outside" },
  "inside_geofence": false,
  "geofence_basis": "device",
  "inside_areas": [],
  "blocked_areas": [],
  "position_source": "device_and_ip",
  "anonymizers": { "vpn": false, "proxy": false, "tor": false, "spoofing": null, "emulator": null },
  "ip_distance_km": 0,
  "ip_distance_uncertainty_km": 12.4,
  "ip_consistent": true,
  "document_distance_km": null,
  "travel_excused": null,
  "consecutive_mismatches": 1,
  "attempts": 3,
  "consent": { "accepted_at": "2026-11-03T10:14:55Z", "version": "hosted-web-1", "locale": "en" },
  "warnings": [
    {
      "risk": "LOCATION_OUTSIDE_GEOFENCE",
      "log_type": "error",
      "short_description": "Device location outside the allowed area",
      "node_id": "geolocation_1"
    }
  ]
}
```

| Field | Type | Description |
| - | - | - |
| `node_id` | string | The workflow node that produced the result, so a workflow with two Location steps stays readable. |
| `status` | string | `Approved`, `In Review`, `Declined` or `Not Finished`, resolved from the warnings. |
| `outcome` | string | What happened on the accepted attempt. See [outcomes](https://docs.didit.me/core-technology/location-verification/overview.md#outcomes). |
| `permission` | string | What the system granted: `granted_precise`, `granted_approximate`, `denied`, `restricted`, `unavailable`, `timeout`, `dismissed` or `not_requested` (IP-only step). |
| `latitude`, `longitude` | number or null | WGS84 position. `null` when there is no position. |
| `accuracy_m` | number or null | Radius of uncertainty in metres. |
| `accuracy_confidence` | string or null | Confidence level of the radius: `p95` (web), `p68` (Android) or `unspecified` (iOS). Platforms differ, so it is recorded rather than normalised. |
| `measured_at` | datetime or null | When the device measured the position, by the device clock. |
| `age_seconds` | integer or null | Time between the measurement and the moment Didit received it. |
| `source` | string or null | `gps`, `fused`, `network`, `wifi`, `cell`, `browser`, `unknown`, or `ip` on an IP-only step. |
| `platform` | string or null | `web`, `ios`, `android`, `react_native` or `flutter`. |
| `sdk_version` | string or null | The SDK version that produced the position. |
| `is_mock` | boolean or null | The system reported a simulated position. `null` means the platform cannot tell (web), not `false`. |
| `produced_by_accessory` | boolean or null | iOS only: the position came from an external accessory. |
| `integrity` | string | Device attestation: `attested`, `not_attested`, `failed`, `unsupported` (web) or `not_determined`. |
| `country_code`, `region_code`, `city` | string or null | The place the position resolves to, worked out offline: ISO 3166-1 alpha-2, ISO 3166-2 and the nearest populated place. The city is a label for reviewers, never a rule input. |
| `geofence` | object | `enabled`, and `result`: `inside`, `outside` or `undetermined`. `result` is `null` when geofencing is off. |
| `inside_geofence` | boolean or null | `true` or `false`, and `null` when geofencing is off or the accuracy circle straddles a boundary. |
| `geofence_basis` | string or null | Which position the area verdict used: `device` or `ip`. |
| `inside_areas`, `blocked_areas` | array | `id`s of the allowed areas the whole accuracy circle is inside, and of the blocked areas it is inside. |
| `position_source` | string or null | The node's `geolocation_position_source` when the attempt ran. |
| `anonymizers` | object or null | `vpn`, `proxy`, `tor`, `spoofing` and `emulator`, each `true`, `false` or `null` when the source cannot tell. |
| `ip_distance_km` | number or null | Distance to the IP location after both uncertainty radii are subtracted. 0 means they overlap. |
| `ip_distance_uncertainty_km` | number or null | The combined radius that was subtracted. |
| `ip_consistent` | boolean or null | `ip_distance_km` is within `geolocation_ip_distance_km`. `null` when either side is unknown. |
| `document_distance_km` | number or null | Distance to the geocoded document address. `null` when no address is on file. |
| `travel_excused` | boolean or null | Travel tolerance excused the distance. `null` when tolerance is off. |
| `consecutive_mismatches` | integer or null | On a final attempt, this check plus the same person's earlier mismatches in a row. |
| `attempts` | integer | The number of the attempt. |
| `consent` | object or null | `accepted_at`, `version` and `locale` of the location notice the person accepted. |
| `warnings` | array | The step's [warnings](https://docs.didit.me/core-technology/location-verification/warnings-location-verification.md). |

## `geolocation_attempts[]`

Every attempt of every Location step, oldest first, with the same measurement, uncertainty, area and distance fields as `geolocation_checks[]` except `warnings`, plus:

| Field | Type | Description |
| - | - | - |
| `received_at` | datetime | When Didit received the attempt. |
| `created_at` | datetime | When the attempt was recorded. |

Attempts a resubmission retired are left out.
The raw client submission and the challenge are never returned.

## Fields for status rules and branches

Custom `status_rules` and branch rules can read these fields:
`geolocation.status`, `geolocation.outcome`, `geolocation.permission`, `geolocation.latitude`, `geolocation.longitude`, `geolocation.accuracy_m`, `geolocation.accuracy_confidence`, `geolocation.age_seconds`, `geolocation.measured_at`, `geolocation.source`, `geolocation.platform`, `geolocation.country` (ISO 3166-1 alpha-3), `geolocation.region`, `geolocation.city`, `geolocation.is_mock`, `geolocation.integrity`, `geolocation.inside_geofence`, `geolocation.ip_distance_km`, `geolocation.ip_consistent`, `geolocation.document_distance_km`, `geolocation.attempts`, `geolocation.consent_at`, `geolocation.inside_areas`, `geolocation.blocked_areas`, `geolocation.anonymizers` (`vpn`, `proxy`, `tor`, `spoofing`, `emulator`) and `geolocation.consecutive_mismatches`.
A missing value matches only `is_empty`, so a rule written for a fraud signal never fires on missing data.

## Related

* [Location verification](https://docs.didit.me/core-technology/location-verification/overview.md) - how the step works and what it costs.
* [Location verification warnings](https://docs.didit.me/core-technology/location-verification/warnings-location-verification.md) - every `LOCATION_*` code.
* [Webhooks](https://docs.didit.me/integration/webhooks.md) - `status.updated` carries the lists.
* [Data models - Warning object](https://docs.didit.me/reference/data-models.md#warning-object) - the shape of every entry in `warnings[]`.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.