Protecting identity data during ID verification

Verifying someone's identity means handling their identity. Protecting it is mostly about holding less, for less time, with a record of who looked. This is how ShieldID approaches that.

Hold less

Every ID image and selfie ShieldID captures is deleted automatically, seven days after it was uploaded, by default. The verification result stays, so you keep what you need to show how you decided without keeping the picture.

Keep it close

Verification runs on our own servers in Canada, not on a public cloud. Connections to ShieldID are encrypted in transit. Our encryption page lists each place encryption is used and where it is not yet, rather than saying encrypted once and leaving you to assume the rest.

Keep a record of who looked

The Activity Ledger records sign-ins, document views, API activity and exports. Entries can be added but not edited or deleted, and the database enforces that.

What this is not

This is not identity-theft insurance or credit monitoring for individuals. It is how a business that verifies identities can limit the data it holds about the people it verifies.