Scope of processing
We process data required to complete identity verification sessions for e-passports, e-ID cards and wallet credentials, and to return personal data and verification outcomes to our customer.
Retention and deletion
Identity verification data is retained temporarily to complete the verification and allow retrieval of the results. It becomes eligible for scheduled cleanup one hour after session expiry. Session metadata may be retained for service operation and billing.
Security commitments
The data is encrypted in transit and at rest. Session controls and retention limits are used to restrict data exposure and lifecycle duration.
Storing identity or verifying on demand
Our model is built around short-lived verification sessions and minimal retention. The goal is to verify cryptographic identity evidence when needed, rather than keep long-lived stores of raw identity data.
GDPR role
We act as a data processor under GDPR and process personal data on behalf of the customer, who acts as the data controller.
Legal documentation