Age verification infrastructure that stays out of the way
You might have noticed that "XYZ" isn't exactly a flashy brand name. That's intentional.
When a visitor verifies their age on your site, the focus should be on your brand — not ours. Age verification is a compliance requirement, not a marketing opportunity. We built XYZ to be infrastructure: reliable, invisible, and out of your way. The best plumbing is the kind you never have to think about.
We're not trying to build a household name. We're trying to solve a real compliance problem for site operators as simply and privately as possible.
XY Zinc is operated by Chaos Unlimited LLC. We come from the industry we serve — with over 25 years of experience operating websites in regulated spaces, we understand the compliance pressures site operators face because we've faced them ourselves.
XYZ Age Verification was born out of necessity. When new regulations required age verification on our own properties, the existing commercial options were either prohibitively expensive or required handing over user data we weren't comfortable sharing. So we built something better and made it available to everyone.
Our system is architected to collect only what's needed for the verification decision and nothing more. Biometric images never touch a disk. Personal information from ID documents is never extracted or stored. Session data auto-deletes. This isn't a feature we added — it's how the system was designed from day one.
Age verification mandates apply to everyone, from large platforms down to independent operators. Pricing should reflect that reality. We keep our rates accessible because compliance shouldn't be a privilege reserved for companies with enterprise budgets.
For the site operator: a straightforward API integration or a plugin install. For the visitor: a quick face scan that takes seconds, not minutes. We handle the complexity of biometric analysis, liveness detection, and regulatory logic so you don't have to.
XYZ uses a two-tier verification model designed to balance accuracy with user experience:
A quick biometric scan classifies whether the visitor is likely an adult. No ID required. Handles approximately 95% of verifications. Takes seconds, not minutes.
For borderline results or jurisdictions requiring document-level verification, Tier 2 adds government ID scanning with face matching. Even at this level, we extract only the date of birth — never names, addresses, or document numbers.
Both tiers leverage established cloud services for the underlying analysis. Our role is the orchestration layer — the privacy controls, the compliance logic, the geographic rule engine, and the zero-retention data architecture that ties it all together.
We are actively pursuing IEEE 2089.1 certification through the Age Check Certification Scheme (ACCS) and are working towards integration with the AgeKey ecosystem to support reusable age credentials via FIDO2 passkeys.
Our platform is designed to meet the compliance requirements of OFCOM (UK), state-level mandates in the United States, and emerging international age verification regulations. We continuously monitor the regulatory landscape to ensure our service evolves with it.
Whether you're a site operator exploring compliance options, a platform looking for an integration partner, or just curious about how we work — we'd like to hear from you.
XY Zinc
Owned and operated by Chaos Unlimited LLC
Email: [email protected]
Web: www.xyzinc.com/contact