You mention COPPA and GDPR but which country regulation do you cover (and in which language?). How do you ensure that the Parents giving consent are the parent of the child (and that you are not getting spoof?). How do you keep up with the changing regulations, with some country having multiple layers (Union, Federal, State, City, ...).
I like the focus on Childs, but you could also extend it to do KYC for financial institutions, the market may need a cheap and reliable solution.
re: spoofing. this is a tough problem to solve and no existing solution guarantees this. we would be able to see suspicious behavior though like multiple verification attempts, time between submission and verification, etc.
Changing regulations is tough. We work with a privacy lawyer to keep us abreast of changing policy and have researchers maintain a database of applicable state, federal, and international laws as well as recent lawsuits.
Financial KYC is interesting for sure. Right now we’re focused on child privacy and very much believe there’s a lot of work to be done there still.