curl --request GET \
--url https://api-prod.blaaiz.com/api/external/compliance/kyc/sessions/{sessionId}/applicant-data \
--header 'x-blaaiz-api-key: <api-key>'import requests
url = "https://api-prod.blaaiz.com/api/external/compliance/kyc/sessions/{sessionId}/applicant-data"
headers = {"x-blaaiz-api-key": "<api-key>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {'x-blaaiz-api-key': '<api-key>'}};
fetch('https://api-prod.blaaiz.com/api/external/compliance/kyc/sessions/{sessionId}/applicant-data', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));require 'uri'
require 'net/http'
url = URI("https://api-prod.blaaiz.com/api/external/compliance/kyc/sessions/{sessionId}/applicant-data")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["x-blaaiz-api-key"] = '<api-key>'
response = http.request(request)
puts response.read_body<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api-prod.blaaiz.com/api/external/compliance/kyc/sessions/{sessionId}/applicant-data",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"x-blaaiz-api-key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}{
"message": "Session applicant data retrieved successfully.",
"data": {
"session_id": "3b81f0d5-9c47-42ae-b6e1-7d2a5c9f4801",
"first_name": "Amara",
"middle_name": null,
"last_name": "Okafor",
"date_of_birth": "1993-04-17",
"country": "NGA",
"nationality": "NGA",
"address": {
"line": "14 Adeola Odeku Street",
"city": "Lagos",
"state": "Lagos",
"postal_code": "101241"
},
"document": {
"type": "PASSPORT",
"number": "A01234567",
"issuing_country": "NGA",
"issue_date": "2021-03-02",
"expiry_date": "2031-03-01"
},
"extracted_at": "2026-08-29T10:52:03.000Z"
}
}{
"message": "Invalid or missing access token"
}{
"message": "The MERCHANT_KYC feature is not enabled for this business."
}{
"message": "Verification session not found."
}{
"message": "This session has not been approved or rejected yet."
}{
"message": "Something went wrong. Quote the request_id in a support ticket."
}Get session applicant data
Get the applicant data the verification provider extracted for one session: name, date of birth, country, nationality, address, and identity document details. The session must be APPROVED or REJECTED; call this only after the session reaches one of those statuses. country and nationality are ISO 3166-1 alpha-3 codes. document is null when the session captured no identity document, and document.number can be null on its own when a live re-read from the provider fails, because Blaaiz does not store the number. data itself is null when the provider holds no applicant record at all for the session.
This endpoint needs both the MERCHANT_KYC business entitlement and the compliance-kyc:pii:read scope; a legacy API key carries no scopes, so only the entitlement applies to key-based requests. compliance-kyc:pii:read is a separate scope from compliance-kyc:read, and no scope bundle grants it — request it explicitly when you create or rotate your OAuth credentials. Every response carries Cache-Control: no-store, and the response body is excluded from your API request logs.
curl --request GET \
--url https://api-prod.blaaiz.com/api/external/compliance/kyc/sessions/{sessionId}/applicant-data \
--header 'x-blaaiz-api-key: <api-key>'import requests
url = "https://api-prod.blaaiz.com/api/external/compliance/kyc/sessions/{sessionId}/applicant-data"
headers = {"x-blaaiz-api-key": "<api-key>"}
response = requests.get(url, headers=headers)
print(response.text)const options = {method: 'GET', headers: {'x-blaaiz-api-key': '<api-key>'}};
fetch('https://api-prod.blaaiz.com/api/external/compliance/kyc/sessions/{sessionId}/applicant-data', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));require 'uri'
require 'net/http'
url = URI("https://api-prod.blaaiz.com/api/external/compliance/kyc/sessions/{sessionId}/applicant-data")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["x-blaaiz-api-key"] = '<api-key>'
response = http.request(request)
puts response.read_body<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api-prod.blaaiz.com/api/external/compliance/kyc/sessions/{sessionId}/applicant-data",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"x-blaaiz-api-key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}{
"message": "Session applicant data retrieved successfully.",
"data": {
"session_id": "3b81f0d5-9c47-42ae-b6e1-7d2a5c9f4801",
"first_name": "Amara",
"middle_name": null,
"last_name": "Okafor",
"date_of_birth": "1993-04-17",
"country": "NGA",
"nationality": "NGA",
"address": {
"line": "14 Adeola Odeku Street",
"city": "Lagos",
"state": "Lagos",
"postal_code": "101241"
},
"document": {
"type": "PASSPORT",
"number": "A01234567",
"issuing_country": "NGA",
"issue_date": "2021-03-02",
"expiry_date": "2031-03-01"
},
"extracted_at": "2026-08-29T10:52:03.000Z"
}
}{
"message": "Invalid or missing access token"
}{
"message": "The MERCHANT_KYC feature is not enabled for this business."
}{
"message": "Verification session not found."
}{
"message": "This session has not been approved or rejected yet."
}{
"message": "Something went wrong. Quote the request_id in a support ticket."
}Authorizations
A legacy API key has no scopes, so only the MERCHANT_KYC entitlement gates this endpoint for key-based requests.
Path Parameters
The verification session id returned by the create endpoint.
Was this page helpful?