How does identity verification work?
The Foundation works with Stripe to conduct identity verification online.
Stripe helps the Foundation’s licensing entity - Finscale ApS which must confirm your identity before allowing a member access to the Trust Entitlements by conducting the following checks:
Captures images of the front and back of your government-issued photo ID and reviews it to ensure the document is authentic using an automated identity verification technology that looks for patterns to help determine if an ID document is real or fake. This process is like a bank teller checking your ID document to confirm that it’s real.
Capture photos of your face and review them to confirm that the photo ID belongs to you, using identity verification technology that uses distinctive physiological characteristics of your face (known as biometric identifiers) to match the photos of your face with the photo on the ID document. This process is similar to a bank teller confirming that the photo on your ID document is you based on your appearance – but it’s a higher-tech and more accurate way to identify you as a unique person.
Collects your name, date of birth, and government ID number, and validates that it’s real by checking this information against a global set of databases to confirm that it exists.
Additional information
Open Bank services use Stripe for identity verification and other payment settlement services.
Stripe asks for your consent before collecting and using your biometric information. The third-party data processor only uses your verification data following the permissions you grant before starting the verification process.
The Foundation collects identifying information about you and the devices that connect to its services, including third-party service providers which include the use of cookies. Stripe uses this information to operate and improve the services it provides to us, including fraud detection, authentication, and analytics. Learn more about how Stripe handles and stores your data.
What are the best practices for successful verification?
Before starting the verification process, here’s what you need:
A valid government-issued photo ID document. Not a photocopy or a picture of an ID document. Make sure that the ID document hasn’t expired.
A device with a camera – use a mobile device if possible. Cameras on mobile devices typically take higher-quality photos than a webcam.
The quality of the images you capture affects success rates dramatically. Below are a few best practices to help make sure that your verification succeeds:
Capture a clear image. Make sure that the images aren’t too dark or bright, and don’t have a glare. Hold steady and allow your camera to focus to avoid blurry photos.
Don’t block any part of your ID document in the image. Ideally you should lay it flat to take the photo.
Don’t block any part of your face. Remove sunglasses, masks, or other accessories.
Find a location with ambient lighting. Avoid spaces with strong overhead lights that cast a shadow on your face or ID document. Avoid sitting directly in front of a bright light which can wash out your face and add a glare to your ID document.
Additional information
We recommend adding these best practices before a user starts the verification process so they know what to expect.
Who has access to my verification data?
Both Finscale ApS and Stripe have access to the information that you submit through the verification flow. We rely on Stripe to help store your verification data. Stripe uses access controls and security standards that are at least as stringent as those used to handle their own KYC and payments compliance data.
Learn more about how Stripe handles and stores your data.
Additional information
Include this question and answer only if you don’t store additional copies of verification data on your systems. Insert your own store and access control policies in the answer.
QUESTION | ADDITIONAL INFORMATION |
---|---|
Why am I asked to verify my identity? | Provide your preferred answer. Some users might be hesitant to share their ID information, so it’s important to help them understand why you’re asking for this information |
Why was I rejected? | You might want to offer alternative methods for verification if a user disputes their results. |
Can I get verified using a different method? | Privacy laws might require you to provide an alternative verification process that doesn’t use biometric technology if the user doesn’t consent to use of their biometric information. Consult your legal counsel for regional requirement. |
How can I access or delete my verification data? | Provide your data privacy process. The Identity API has a redaction endpoint that allows you to delete the verification data that Stripe Identity stores on behalf of your business. For example, you can use this tool to meet your deletion requirements when an end-user from Europe or California asks you to delete their data, or when you collect an ID from a country such as Germany that requires you to delete an ID card upon completion of the verification even if there’s no deletion request from the end user. If you’ve created additional copies of a user’s data, you might also need to delete these as well. Stripe doesn’t delete data on your behalf when we store the data as your processor, even if your end-user asks us to, because we recognise you must conduct your own legal analysis on whether deletion is appropriate. If your end-user contacts us requesting deletion, we’ll respond to the request with respect to any data that we hold as data controller, and also recommend the end-user contact you to request deletion. |