Privacy-minded businesses
Protecting identity data during ID verification
How ShieldID limits the identity data it holds: ID images deleted after seven days, hosting in Canada and an append-only record of document views.
Verifying someone's identity means handling their identity. Protecting it is mostly about holding less, for less time, with a record of who looked. This is how ShieldID approaches that.
Hold less
Every ID image and selfie ShieldID captures is deleted automatically, seven days after it was uploaded, by default. The verification result stays, so you keep what you need to show how you decided without keeping the picture.
Keep it close
Verification runs on our own servers in Canada, not on a public cloud. Connections to ShieldID are encrypted in transit. Our encryption page lists each place encryption is used and where it is not yet, rather than saying encrypted once and leaving you to assume the rest.
Keep a record of who looked
The Activity Ledger records sign-ins, document views, API activity and exports. Entries can be added but not edited or deleted, and the database enforces that.
What this is not
This is not identity-theft insurance or credit monitoring for individuals. It is how a business that verifies identities can limit the data it holds about the people it verifies.
問題