DigiLocker's power is that it delivers a genuine, issuer-signed document straight from the source — but only when the holder chooses to share it. That consent step is the heart of the flow, and understanding it helps you design a check that's both trustworthy and respectful.
What the holder actually approves
The resident is asked to share a specific document with your organisation for a stated purpose. They see what's being requested and approve it themselves — nothing is pulled silently. That explicit, purpose-specific consent is what makes the exchange legitimate.
The flow, step by step
- Your flow requests a specific document (for example, a Driving Licence).
- The holder authenticates with DigiLocker and sees the request.
- They consent to share that document with you.
- You receive the issuer-signed document — genuine and tamper-evident.
Why consent-first matters
Consent isn't only a legal nicety; it's what distinguishes verification from surveillance. Collect only the document you need, for the purpose you stated, and keep it no longer than necessary — in line with getting consent right under the DPDP Act.
Genuine beats a photocopy
Because the document comes signed from the issuer, it can't be quietly edited — unlike a scan or an OCR read. See DigiLocker verification for enterprises.
DigiLocker in Certopact
Certopact Entry pulls issuer-signed documents through DigiLocker with consent, alongside Aadhaar verification. This is general information, not legal advice.