Xpoint, Radar, Locance, GeoComply, Octet: what each actually does.
Location verification vendors differ mainly in which signals they read, whether the user installs anything, what leaves the device, and who can check the result afterwards.
All five read location from the device in some form, and all five are used for compliance. They differ in what the user installs, what leaves the device, what comes back, and who can check the answer afterwards. Each row below is drawn from the vendor’s own published material, checked on 16 October 2026.
| Vendor | Signals, as published | User installs | Returns | Who can verify the result |
|---|---|---|---|---|
| GeoComply | GPS, GSM, Wi-Fi and IP; device integrity checks | SDKs for mobile apps, desktop and web browsers | A location decision | GeoComply |
| Xpoint | GPS, connections and device information | SDK in the operator’s native app; browser play supported | Not published | Not published |
| Radar | GPS, Wi-Fi, IP, Bluetooth and sensors | SDK; on web, an optional companion app or no download | Pass or fail, fraud flags, country and state, in a signed token | The customer, with a key Radar issues |
| Locance | GPS, Wi-Fi, cell, platform data and IP | Nothing on web (JavaScript); SDKs for native apps | Allow or deny, confidence score, reason codes, coordinates or address | Locance |
| Octet | GPS, Wi-Fi, cell, motion and other phone sensors, read on the device | SDK in your app; LFA is an authenticator app; Browser needs nothing | YES, NO or INDETERMINATE, signed in device hardware. No coordinates | Anyone, offline, with open-source octet-verify |
GeoComply
GeoComply Core says it collects “GPS, GSM, WiFi, plus IP addresses” from a user’s device, “pinpoints a customer’s location to within meters,” and runs “hundreds of location data, device integrity, and identity fraud checks on every geolocation transaction” (GeoComply Core). Its separate product, GeoGuard, is IP-based and flags VPNs, proxies and Tor for streaming rights holders and sanctions screening. The decision is made by GeoComply and returned to the operator. For a closer look, see GeoComply alternatives.
Xpoint
Xpoint describes Xpoint Verify as “geolocation validator software which enables our partners to validate GPS position, connections and device information,” built for North American real-money gaming, with SDKs embedded in operators’ iOS and Android apps (xpoint.tech). Its app store listing is actively maintained (App Store). In 2024 it announced Trust Mode, which reduces checks for players on known home or office Wi-Fi (CDC Gaming Reports). Xpoint does not publish its output format or how a result could be checked by a third party. Its website copy was last updated in 2022, so treat this row as the least certain.
Radar
Radar is a general location platform, with geofencing, maps and a fraud product. Radar Protect “combines GPS, Wi-Fi, IP, Bluetooth, and sensor data” to verify location for gaming and fintech (Radar Protect). Its developer docs describe a call that returns a pass or fail, fraud flags such as mocked and proxy, and a “tamper-proof JSON Web Token” that the customer’s server checks with a secret key from Radar’s dashboard. The token expires, by default after 20 minutes (Radar docs). That makes Radar the only other vendor here whose result arrives signed. The difference is where the signature is made. Radar’s service issues the token, so verifying it confirms only that Radar said it. An Octet proof is signed by a key in the phone’s secure hardware and checked against Apple’s and Google’s attestation roots, so it does not depend on trusting Octet.
Locance
Locance offers geolocation compliance with “no software installation required” on the web, through a JavaScript SDK, plus native SDKs (locance.com). It reads “GPS, Wi-Fi, cell tower, and platform data” from the device alongside IP intelligence, and returns allow or deny decisions, confidence scores, reason codes and an expiry (How it works). For gaming it also returns coordinates and street address. LocationSmart, known for network-based mobile location, is now a Locance subsidiary. Locance serves gaming, lottery, prediction markets, financial services and supply chain.
Octet
Octet runs on the device. The SDK reads the phone’s signals, decides on the phone whether the device is inside a named region, and signs the verdict with a key in the Secure Enclave or StrongBox. The proof carries the attestation chain, so a relying party can check it offline with the open-source octet-verify. Coordinates do not leave the phone. LFA brings the same check to sign-in through OpenID Connect. Octet Browser gives a country-level verdict for web sessions with no install, from browser and network signals. It is not hardware-attested and is not proof of a person’s presence.
What Octet offers is a result that someone other than Octet can verify.
How to choose
- If your users are on the web with no app, look at Locance, Radar’s no-download option, or Octet Browser for country-level answers. A browser cannot use hardware attestation, so each gives a weaker guarantee than a check in an app.
- If you want to keep precise location out of your systems and your vendor’s, look for a verdict rather than coordinates.
- If someone else, such as an auditor or counterparty, has to trust the result, ask each vendor how that person can verify it without contacting the vendor.
This page compares what vendors publish, not how well their products work. None of them, Octet included, publishes externally audited accuracy. Vendors change products often. If something here is out of date, write to hello@octetproof.com and we will correct it.
- GPS, Wi-Fi, GSM and IP: what each can and cannot establish
- IP geolocation vs device geolocation: what’s the difference?
- What is device-attested location?
- What is geolocation compliance?
- What is proof of location?
- GeoComply alternatives
- Frontier AI access is a location problem. 28 Sep 2026
- Age verification is a location problem. 23 Sep 2026
- Cryptographic proof of location. 6 Aug 2026
- Octet is live. 25 Jun 2026
Last reviewed 19 October 2026