Digital Identity Trust (DIT) is Equifax's identity verification service. The API takes the consumer's personal details and returns a per-component trust assessment plus an overall recommendation: Approve, Review, or Deny. CRS forwards the relevant pieces of the DIT response to your integration so you can drive enrollment, step-up authentication, or fraud routing without parsing Equifax's raw payload yourself.
This page explains how DIT decides, what each component means, and every reason code you can see in the response.
DIT runs a series of evaluations across trust components (Identity, Address, DOB, SSN, Phone, Email, Device). Each component returns a Yes / No trust verdict and a set of reason codes that explain it. The overall recommendation is computed from those verdicts:
| Recommendation | When it's returned |
|---|---|
| Approve | Both Identity Trust and Address Trust are Yes, and at least one other component (Phone, Email, SSN, …) is also Yes. DOB Trust is not part of this rule — it only feeds Identity Trust. |
| Review | Identity Trust and Address Trust are both Yes, but no other component is trusted. |
| Deny | Identity is No or Address is No. The other components are ignored — neither phone nor email evidence can compensate for a failed identity or address result. |
Identity Trust = Yes ?
│
┌─────────┴─────────┐
No Yes
│ │
Deny Address Trust = Yes ?
│
┌──────────┴──────────┐
No Yes
│ │
Deny Any other trust = Yes ?
│
┌───────────┴───────────┐
No Yes
│ │
Review Approve