How we protect your data
Verifiero is meant to give you control over your identity. Here we describe openly what we collect, how it is protected and what is done versus on the way.
- You approve every share
- Encrypted in transit and at rest
- Hosted within the EU
You decide
You approve every share
You see what is requested and by whom, and you choose whether to share.
Only what’s needed
You can share an answer, such as “over 18”, instead of the whole ID document.
Alias instead of contact details
You can verify yourself without handing out your email or phone number.
You see your history
In the app you can see which details have been shared, and with whom.
What is actually sent
Verifiero sits between the person and the company. The company asks a question and gets only the answer.
Schematic picture. Which details can be requested depends on what you and the user agree on.
How it works
- The person registers once with ID and biometrics.
- The company asks, for example: is this person over 18?
- The person sees the question and approves.
- The company gets the answer “yes”, not a name or date of birth.
How it is built
This is how your data travels, from your phone to our database.
Your device
Biometric, encrypted login in the app.
Secure API gateway
Encrypted traffic (TLS), multi-factor authentication and access control.
Verifiero backend
Runs in an isolated, private network.
Access control
Multi-factor authentication (MFA) for the backend and biometric login in the app.
Encrypted database
Data is encrypted in transit and at rest, and hosted within the EU.
What we collect, and why
To check that you are you, we need some basic details. The full list is in the privacy policy.
| Data | When | Why |
|---|---|---|
| ID document (passport, ID card or driver’s licence) and face scan | At registration | To check that the ID is genuine and that it is you. The scan is done with a service from a trusted provider. |
| Email address and password | When you create an account | So that you can log in. |
| Your sharing history | When you share something | So that you can see what was shared, with whom and when. |
Status and roadmap
What is in place and what we are working towards.
- In place
Encrypted transfer
Traffic between app, API and backend is encrypted.
- In place
Encrypted storage
Data is encrypted when stored.
- In place
Hosting within the EU
Verifiero is hosted within the EU.
- In place
Consent at every share
Nothing is shared unless the user approves.
- In progress
Assurance level LOA3
We are working towards certification at assurance level LOA3.
- Planned
ISO 27001
Planned information security certification.
The certifications above are goals. We have not achieved them and do not claim to have.
Security FAQ
Where is my data stored?
Within the EU, encrypted in transit and at rest. When it is not in use on your device it sits in our backend, protected by several security mechanisms.
Do you share my data with others?
Not without your approval. You see every time what is requested and by whom, and you can see your sharing history in the app.
Who else is involved at registration?
The ID scan and face check are done with a service from a trusted provider, which checks that the ID document is not fake or fabricated.
Can you sell my data?
No. Under our policy nothing is shared without your consent. If the policy ever changes, existing users get a proper chance to delete their data and account before anything is shared or sold.
Is Verifiero certified?
Not yet. We are working towards assurance level LOA3 and plan ISO 27001. See the status above.
Do you follow GDPR?
We process personal data in accordance with GDPR, as described in our privacy policy.
Found a security issue?
Write to us with as much detail as you can and we will look into it. Don’t send personal data unless you have to.