Check the bank statements and payslips behind every rental or lease
Atomara is a REST API that checks whether a PDF bank statement or payslip submitted with a rental or leasing application was edited after it was issued, and returns a verdict, a 0–100 score and the signals behind them.
A car leaves the lot on the strength of a few PDFs. Send each one to a single endpoint and know whether it was edited before the keys are handed over.
Get an API key Talk to us about volume
Register with a work email and your first key adds 100 trial checks.
What applicants send you
Bank statements
Used to confirm income and that the deposit or instalments are affordable.
- Balances or salary credits edited after export
- Rows added or removed so the totals no longer reconcile
- A statement regenerated by a tool that is not the bank's
Payslips
Proof of steady income for a lease or finance agreement.
- Salary figures changed in an editor and re-saved
- A payslip built in Word or Canva from a template
- Fonts or text blocks that do not match the rest of the page
Proof of address
Utility bills and statements that tie the applicant to an address.
- A name or an address replaced on a genuine bill
- Dates moved forward to look recent
- A file saved again by an editor after it was downloaded
How to add it to your booking or credit flow
- Create a key. Register, open Developers and issue an API key. A work email gets trial checks on its first key.
- Send each PDF. POST the file with your booking or application id as external_id. Most answers come back in the same response; a slow one returns 202 processing and you fetch it with GET /documents/{id}.
- Decide with the answer. Approve clean documents and route anything flagged to a person before the car is released.
curl -X POST https://atomara.io/api/v1/documents \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Idempotency-Key: booking-77104-statement" \
-F "file=@statement.pdf" \
-F "external_id=booking-77104"
{
"id": "doc_3f9a1c8e6d2b4f7a9c311e5b0a77d4c2",
"object": "document",
"status": "completed",
"external_id": "booking-77104",
"verdict": "tampered",
"score": 3,
"tamper_score": 0.87,
"integrity_score": 0.05,
"confidence": 0.82,
"summary": "The file was re-saved by an editor after issue.",
"signals": [
{
"id": "editor_producer_blacklist",
"module": "M4",
"kind": "tamper",
"severity": "high",
"evidence": "Producer: Adobe Acrobat Pro DC",
"scored": true
},
{
"id": "invariant_balance",
"module": "M8",
"kind": "tamper",
"severity": "medium",
"page": 2,
"evidence": "Closing balance: expected 4310.50, found 6310.50",
"scored": true
}
],
"engine": {
"version": "1.0.0",
"rules_revision": "2026-07-07"
},
"report_url": "https://atomara.io/account/uploads/3f9a1c8e6d2b4f7a9c311e5b0a77d4c2"
}
What your counter and credit staff see
A verdict
tampered, suspicious, inconclusive, authentic (a digitally signed file, or one matching a reference template of its issuer) or unsupported — one field you can branch on.
A 0–100 score
One number to sort a review queue by. A scan or a photo usually carries no score.
The signals
Each finding with its evidence, such as the editor named in the file or a balance that does not reconcile, so staff see why and not just what.
What it does not do
- It reads the PDF itself: its structure, metadata, fonts and arithmetic. It does not contact the bank or employer that issued it.
- Send documents as PDF — a JPEG or PNG is refused. A scan or a photo saved as a PDF is checked as an image and usually comes back without a score, because a picture of a page cannot show which file it was taken from. Route it to a person, or ask for the original PDF.
- An unsigned file is called authentic only when its structure matches, in every detail, a reference template learned from genuine documents of its issuer, and nothing points to editing; the response then says whether the amounts were verified too. Otherwise the best answer for an unsigned file is inconclusive with no signs of editing found.
- There are no bank-specific templates. The same checks run on a statement from any bank.
Pricing
From $0.10 per document at volume, with no minimum and no setup fee. One document is one check, whatever its page count. Paid plans start at $5 a month. See all plans →
Your users' documents
- Files and reports are deleted 30 days after upload, automatically; only the verdict and the score are kept.
- DELETE /documents/{id} removes the file and its report immediately.
- Documents are not shared with third parties and are not used to train models.
- No person is in the loop: the verdict comes from the engine, not from a reviewer.
Questions platform teams ask
Can counter staff use it without our developers?
Yes. The web dashboard takes a PDF upload and shows the same report; the API is for checking every application automatically.
What about photos of documents taken at the counter?
They must reach the API as a PDF — a JPEG or PNG is refused — and a photo saved as a PDF is checked as an image and usually comes back without a score, because a picture of a page cannot show which file it was taken from. Ask applicants to send the original PDF from their bank or payroll portal.
Is it fast enough to run before the car is released?
Most answers come back in the same response as the upload, so the check fits inside a booking or a counter visit. A slow one returns 202 processing; fetch it a moment later with GET /documents/{id}.
Does it check driving licences or ID documents?
No. It checks PDF documents — bank statements, payslips, utility bills — for signs of editing. Identity documents need an identity-verification service; use this alongside one, for the paperwork behind a deposit, a lease or dealer finance.
Does it confirm the applicant's income with the bank?
No. It checks the file itself — its structure, metadata, fonts and arithmetic — and tells you whether it shows signs of editing.
Is there a free trial?
Every account gets 3 full checks once the email is confirmed. Register with a work email and your first API key adds trial checks, so you can run real applications through it.
How long do you keep applicants' documents?
30 days, after which the file and its report are deleted automatically, keeping only the verdict and the score. You can delete any document immediately with DELETE /documents/{id}.
Talk to us about volume
Tell us what you receive and how much of it. We answer within one working day and can add trial credits for a real test.