ID Check Data Retention & Compliance Post

Verisoul’s ID Check helps customers add biometric verification to their fraud-prevention workflow without having to operate the underlying biometric-data handling themselves.

What Verisoul manages

• Consent-led verification: biometric information is collected and used only to provide ID Check and fraud-prevention services with the user’s consent.

• Biometric-data handling: Verisoul acts as an independent controller for this processing. Biometric data is processed in Verisoul systems and does not hit or reside on the customer’s servers (a huge benefit for customers).

• Operational compliance support: Verisoul manages the infrastructure and processes needed to operate, secure, audit, and support the verification service— reducing the compliance and operational burden on customers.

Retention and deletion

We retain biometric information only as needed to operate and secure the service, prevent fraud, support audits, and meet applicable legal and compliance obligations. Under the biometric consent form, biometric information may be retained for up to three years after a user’s last interaction with Verisoul or a Verisoul-powered verification flow, unless a shorter period is required by law.

Customers can request deletion of user data at any time. Verisoul will delete the relevant user data when requested by the customer, including when the customer deletes the user through the dashboard or calls the Delete API.

Learn more

Read the full Verisoul Biometric Information Consent Form.