Your identity matters.
So does your privacy.
Identity verification requires sharing personal information. You should be able to see and understand how that information is handled.
When you verify with Identra, your data is used for a specific purpose, protected by security practices, and kept within defined limits.
How we verify identity
Why does identity verification (IDV) exist?
Many online services verify identity to:
- Prevent fraud and imidentration
- Comply with financial, safety, or age-related regulations
- Protect users and platform integrity
What is Identra's role when an organization asks me to verify my identity?
Identra primarily acts as a data processor. This means we process information on behalf of the organization you're interacting with, and only to provide identity verification and related services they've requested.
In limited circumstances such as Identra Wallet, Identra may act as a data controller. This means we decide how your information is handled, in accordance with applicable data protection laws.
What personal information might Identra collect?
We collect only what's needed to provide the service requested. This may include:
- Information you provide (e.g., name, contact details, government ID images)
- Photos or video you upload (e.g., for facial recognition and liveness check)
- Device or technical data (like IP address or browser signals)
- Data from third-party sources if used in verification checks
How does Identra use my data?
We use your information only to complete the verification or fraud prevention checks requested by the organization you're interacting with. We do not use your personal information for marketing, and we don't sell to third parties.
Collection
You submit information during a secure verification flow. Depending on what the organization requires to meet compliance or trust and safety initiatives, this may include a government ID, selfie, business details, or something else.
Secure Identity Portal
EncryptedScan Government ID
Place front of ID card within the camera boundary guidelines
Identra keeps transmission pipelines secure with ISO 27001-rated TLS encryptions.
Processing
Identra uses secure, automated systems and predefined rules to verify your information. Depending on the organization's requirements, this may include checking it against fraud signals and trusted sources, such as public records.
ID PROCESSING PIPELINE
Cross-referencing uses strict automated lookup routines. AI is used solely for accuracy, never for unrequested training.
Outcome
We return an outcome to the company that asked you to complete verification, which may include a status (for example, "verified" or "not verified") and relevant signals or supporting information based on their configuration and use case.
The company can access the information you submit along with your verification status and related information. However, privacy-preserving credential flows can limit access to that information.
Your information is not shared or repurposed beyond verification.
DECISION DISCOVERY
Automated Decision Pipeline Clear
Outcome safely transferred to customer platform. No data retains in public-facing cache nodes.
Privacy overview
Privacy Notices
Documents & Guidelines
Standard Privacy Policy
For website visitors and business customers.
Identity Verification Notice
Applies where Identra provides certain services directly.
GLBA Privacy Notice
Applies where required under U.S. financial privacy law.
Privacy by default
Privacy and data security are core to how we operate. We do not sell or share personal data processed for verification purposes and we do not use personal data outside the scope of what is listed in our privacy policy.
Does Identra sell or share my data?
No. Identra does not sell personal data or broker it to third parties. Privacy and data security are core to how we operate.
Is my data used to train AI models?
No. We do not use your personal data for any AI or model training.
Who has access to my data?
Access is limited to automated systems and authorized personnel under strict role-based controls. Human review only occurs when configured by the organization you are interacting with and is subject to audit and oversight.
How does Identra work with companies?
We work with organizations across industries that need secure identity verification and assurance. We do not disclose details of customer relationships, and we do not share user data beyond what is necessary for providing our services.
How much data do I have to provide?
We collect the minimum data needed and continuously evaluate the impact of our activities on data privacy to improve our practices.
How does Identra safeguard my data?
We use industry-standard safeguards including encryption, secure storage, and access controls to protect your information while we process it. These measures reflect our security-first design and compliance frameworks.
How we safeguard your data
Beyond limiting how data is used, we apply layered safeguards to protect it while it is processed and stored.
Encryption in transit and at rest
Your information is encrypted while being transmitted and while stored, helping prevent unauthorized access.
Restricted system access
We limit access to sensitive data through single sign-on, logged access, and role-based permissions, which we regularly review.
Monitored infrastructure
We continuously monitor our systems for unusual activity and use alerts and response processes to act quickly.
Secure hosting environment
Verification services run on secure cloud infrastructure designed with physical, network, and operational safeguards.
Ongoing security review
We conduct regular internal reviews and external assessments to evaluate and improve our security controls over time.
Passkeys for Identra Wallet
Information saved to a Identra Wallet is encrypted and protected by passkeys, a passwordless authentication method secured on your device by Face ID, ensuring only you can unlock it.
INDUSTRY STANDARDS
Security and privacy at our core
Security and privacy are paramount to a trusted relationship. That's why Identra is compliant and certified to the highest industry standards and committed to protecting your privacy.
Your data rights and control
How we process your data depends on whether we're acting as a processor or controller, the organization's configuration, and applicable laws.
What rights do I have over my information?
You may have the right to:
- Access your personal information
- Correct inaccurate or outdated information
- Request deletion of your information
- Receive a portable copy of your information
Where can I find and manage my data?
Visit our consumer data portal to check records, request files, or coordinate structured GDPR/CCPA removals on your behalf.
How long is my data retained?
Retention periods vary by organization and applicable legal requirements. In some cases, it must be kept for a set period to meet fraud prevention, compliance, or financial regulatory obligations.
How do I delete my data?
Submit a request through the Privacy Portal. We'll review your request, verify your identity, and check for matches. Then we'll either delete your data or route your request to the appropriate organization, depending on how your data was processed.
Who can I contact with privacy questions?
For questions about Identra's privacy practices, or to submit custom CCPA inquiries directly to our security officer, use the Privacy Portal link below or email privacy@withidentra.com.