Security & privacy
Built for sensitive data
How we protect data
Security built into every step
Encryption
Images, documents and personal data are encrypted in transit with TLS and at rest in storage.
Access control
Team roles and permissions, with two-factor authentication required for dashboard sign-in.
Audit logging
Every view, download, decision and setting change is recorded with who did it and when.
Automatic deletion
Images and biometric data are deleted on a fixed schedule after a decision.
Secure links
Each link is unique to one customer, expires automatically and can be cancelled at any time.
Signed webhooks
Events are signed with HMAC-SHA256 so your systems can confirm they came from us.
Explicit consent
Customers review and accept how their data is used before anything is collected.
Dedicated infrastructure
The verification platform runs on dedicated servers, separate from this website.
Biometric data
Our biometric data commitments
- Collected only with the person’s written consent
- Used only to verify identity and prevent fraud
- Never sold, leased or traded
- Deleted within 90 days of a decision by default
- Never kept longer than three years from the last interaction
Retention
Data is deleted on a schedule — automatically
Security reviews
Need a security questionnaire, our data processing agreement or details about our subprocessors? We’re happy to help.
Report a vulnerability
If you believe you’ve found a security issue, contact our security team with the details. Please give us reasonable time to fix it before disclosing it publicly.
Start verifying customers today
