Collection
Data, privacy & compliance
How your users' data is protected, what a verification collects, deletion, opting out of model training, DPAs, certifications and where data is handled.
Your users' data
4 articles- How Didit protects your users' dataTLS 1.3 in transit, AES-256 at rest, EU processing by default, audited controls and retention you configure, plus what stays your responsibility as controller.
- Deleting sessions and personal dataHow to delete a verification session and everything it produced - and exactly what deletion does and doesn't affect. Deletion is immediate and irreversible.
- Opting out of model trainingStop Didit using your verification data to improve its models in Settings, General, Privacy and data use. One organization-wide switch, effective immediately.
- What personal data a verification collectsThe documents, selfies, IP address and recordings a verification collects, what Didit keeps by default and how to limit it per feature, for your GDPR review.
Contracts & assurance
2 articles- DPAs, data residency and subprocessorsDidit processes data in the EU by default, with in-country processing on enterprise contracts. Get a DPA, the TOMs and answers for your procurement review.
- Certifications and complianceSOC 2 Type 2, ISO/IEC 27001 with cloud extensions, iBeta Level 1 PAD, German youth-protection certification, Spanish regulator attestation, EBA/MiCA opinion.