Q: Security of details of identity document used for verification
Hi, I bought your previous Certyfile LTD on here. I was impressed with it but then learned that the identity document number utilised was placed on every certified file certificate and listed when checking a verified document, which, in my case, was my driver's license number. When I put to you that this was a breach of privacy, you said that anyone verifying the document would need a copy of the number... which was my driver's license number. Does it work this way in the Certyfirma product? I do not want my driver's license, passport, or identity document number known to everyone by it being public on the online document verification. If I could also ask, now that we're a few years on, do you see the issue with this generally? If so, it would be wonderful to re-examine your other products as they have promising use cases. Thank you.
iCommunity_Support
Jan 15, 2025A: Hi Dannn,
Thank you for your thoughtful question and for your previous support of Certyfile.
In Certyfirma, we have updated our processes and security measures significantly to prioritize user privacy and address concerns like the one you’ve mentioned. Specifically:
1. Identity Document Details:
In Certyfirma, sensitive information such as identity document numbers (e.g., driver’s license or passport numbers) is NEVER included on the verification certificates or made publicly accessible. Instead, we only display non-sensitive metadata necessary for verifying the authenticity of a document (e.g., signer name, date/time, and the unique digital signature hash). And the most important: the id document is ONLY used the first time, for the previous identity validation process. After that, for the signing requests, only facial (biometric) verification is used.
2. Enhanced Verification Security:
During the identity verification process, the document details are securely used to authenticate the user but are NOT shared with the other party or made publicly visible. This ensures compliance with privacy regulations like GDPR while maintaining a robust verification process.
3. Continuous Improvements:
We deeply value feedback like yours and continually refine our products to meet both legal and privacy standards. If this updated approach aligns with your needs, we'd love for you to revisit Certyfirma and explore how it can support your use cases securely and effectively.
If you have further questions or would like more information on our privacy practices, feel free to reach out. And we hope you will be encouraged to use Certyfima ;)
Thank you again for raising this important point for us!
Best regards,
Certyfirma Team
dannnThank you Certyfirma team, this sounds promising and it seems like an excellent product.
Thank you for your kind words! We’re thrilled to hear that you find Certyfirma promising. If you decide to explore the product further or have any additional questions, feel free to reach out to us. Also, if you enjoy using Certyfirma, we’d greatly appreciate it if you could share your experience in a review—it helps us grow and improve! 😊