Agent · /llms.txt SHA-256
Comparison

Xpoint, Radar, Locance, GeoComply, Octet: what each actually does.

Location verification vendors differ mainly in which signals they read, whether the user installs anything, what leaves the device, and who can check the result afterwards.

All five read location from the device in some form, and all five are used for compliance. They differ in what the user installs, what leaves the device, what comes back, and who can check the answer afterwards. Each row below is drawn from the vendor’s own published material, checked on 16 October 2026.

VendorSignals, as publishedUser installsReturnsWho can verify the result
GeoComplyGPS, GSM, Wi-Fi and IP; device integrity checksSDKs for mobile apps, desktop and web browsersA location decisionGeoComply
XpointGPS, connections and device informationSDK in the operator’s native app; browser play supportedNot publishedNot published
RadarGPS, Wi-Fi, IP, Bluetooth and sensorsSDK; on web, an optional companion app or no downloadPass or fail, fraud flags, country and state, in a signed tokenThe customer, with a key Radar issues
LocanceGPS, Wi-Fi, cell, platform data and IPNothing on web (JavaScript); SDKs for native appsAllow or deny, confidence score, reason codes, coordinates or addressLocance
OctetGPS, Wi-Fi, cell, motion and other phone sensors, read on the deviceSDK in your app; LFA is an authenticator app; Browser needs nothingYES, NO or INDETERMINATE, signed in device hardware. No coordinatesAnyone, offline, with open-source octet-verify

GeoComply

GeoComply Core says it collects “GPS, GSM, WiFi, plus IP addresses” from a user’s device, “pinpoints a customer’s location to within meters,” and runs “hundreds of location data, device integrity, and identity fraud checks on every geolocation transaction” (GeoComply Core). Its separate product, GeoGuard, is IP-based and flags VPNs, proxies and Tor for streaming rights holders and sanctions screening. The decision is made by GeoComply and returned to the operator. For a closer look, see GeoComply alternatives.

Xpoint

Xpoint describes Xpoint Verify as “geolocation validator software which enables our partners to validate GPS position, connections and device information,” built for North American real-money gaming, with SDKs embedded in operators’ iOS and Android apps (xpoint.tech). Its app store listing is actively maintained (App Store). In 2024 it announced Trust Mode, which reduces checks for players on known home or office Wi-Fi (CDC Gaming Reports). Xpoint does not publish its output format or how a result could be checked by a third party. Its website copy was last updated in 2022, so treat this row as the least certain.

Radar

Radar is a general location platform, with geofencing, maps and a fraud product. Radar Protect “combines GPS, Wi-Fi, IP, Bluetooth, and sensor data” to verify location for gaming and fintech (Radar Protect). Its developer docs describe a call that returns a pass or fail, fraud flags such as mocked and proxy, and a “tamper-proof JSON Web Token” that the customer’s server checks with a secret key from Radar’s dashboard. The token expires, by default after 20 minutes (Radar docs). That makes Radar the only other vendor here whose result arrives signed. The difference is where the signature is made. Radar’s service issues the token, so verifying it confirms only that Radar said it. An Octet proof is signed by a key in the phone’s secure hardware and checked against Apple’s and Google’s attestation roots, so it does not depend on trusting Octet.

Locance

Locance offers geolocation compliance with “no software installation required” on the web, through a JavaScript SDK, plus native SDKs (locance.com). It reads “GPS, Wi-Fi, cell tower, and platform data” from the device alongside IP intelligence, and returns allow or deny decisions, confidence scores, reason codes and an expiry (How it works). For gaming it also returns coordinates and street address. LocationSmart, known for network-based mobile location, is now a Locance subsidiary. Locance serves gaming, lottery, prediction markets, financial services and supply chain.

Octet

Octet runs on the device. The SDK reads the phone’s signals, decides on the phone whether the device is inside a named region, and signs the verdict with a key in the Secure Enclave or StrongBox. The proof carries the attestation chain, so a relying party can check it offline with the open-source octet-verify. Coordinates do not leave the phone. LFA brings the same check to sign-in through OpenID Connect. Octet Browser gives a country-level verdict for web sessions with no install, from browser and network signals. It is not hardware-attested and is not proof of a person’s presence.

What Octet offers is a result that someone other than Octet can verify.

How to choose

  • If your users are on the web with no app, look at Locance, Radar’s no-download option, or Octet Browser for country-level answers. A browser cannot use hardware attestation, so each gives a weaker guarantee than a check in an app.
  • If you want to keep precise location out of your systems and your vendor’s, look for a verdict rather than coordinates.
  • If someone else, such as an auditor or counterparty, has to trust the result, ask each vendor how that person can verify it without contacting the vendor.
What this does not establish

This page compares what vendors publish, not how well their products work. None of them, Octet included, publishes externally audited accuracy. Vendors change products often. If something here is out of date, write to hello@octetproof.com and we will correct it.

Last reviewed 19 October 2026

TermsPrivacy© 2026 Understone, Inc. d/b/a Octet