Entrust Identity Verification Services Product Privacy Notice (incorporated PDF)

Affirm · agreement dated May 29, 2024 · Official agreement

2 of 36 cards in Linking & Identification

Linking & Identification · Company practice

Known Faces checks new faces against past checks and adds a match

Known Faces compares the face on an image or video against a database of scans of face geometry from faces in past checks completed by the Client, and alerts if there is a match. It also adds the extracted scans from the new image or video to that database. For this service, the notice states that scans of face geometry are used for the purpose of uniquely identifying a natural person.

Details

Why: uniquely identifying a natural person (stated for this service)
What it does: compares face scans with past checks and adds the new scan

Supporting quotations

| Categories of Personal Data ● Image or video of the User’s face ● Onfido User unique identifier ● Check status/outcome and related tracking information ● Scans of face geometry | Known Faces (1) Compares the face on an image or video against a database of scans of face geometry of the faces from past checks completed by the Client and alerts if there is a match, and (2) adds the extracted scans of face geometry from the face on the image or video to the database in (1). For this service, scans of face geometry are used for the purpose of uniquely identifying a natural person.

Qualifications & exceptions

The database consists of faces from the Client's past checks.
The notice uses “Client” for the Customer in this row.

Not stated here

The notice does not describe how a User is removed from the database, how long scans remain, or what the Client does with an alert.

Cross-references

contrast (model-proposed): Repeat Attempts compares document data across a Customer's new Users — Both services compare a new submission with earlier data, but Known Faces compares face geometry while Repeat Attempts compares document data; the notice presents them as separate services with different data categories.

Linking & Identification · Company practice

Repeat Attempts compares document data across a Customer's new Users

Personal data extracted from a document during a check is stored in the Repeat Attempts Database and compared with the same data points from documents other new Users of the Customer submit, for the purposes of detecting and preventing fraud. Abnormal or inconsistent matches are flagged as a possible indicator that the new User's document is not genuine. The categories are the Onfido User identifier, the document image and describing information, extracted information, a document image hash number, and information about anomalous cross-matches with other documents.

Details

Why: detecting and preventing fraud
What it does: stores document data and compares it across new Users

Supporting quotations

| Categories of Personal Data: ● Onfido User unique identifier ● Image of the identity document and information describing the identity document ● Information extracted from the document ● Document image hash number ● Information about anomalous cross-matches with other documents | Repeat Attempts Personal Data extracted from the document during a check are stored in the Repeat Attempts Database and are compared to the same data points from other documents submitted by the Customer’s new Users for the purposes of detecting and preventing fraud. Abnormal/inconsistent matches will be flagged as a possible indicator that the document presented by the new User is not genuine.

Qualifications & exceptions

Comparison is with documents submitted by the same Customer's new Users, as described in the notice.
A flag is only a possible indicator; the notice does not say it decides the outcome.

Not stated here

The notice does not state how long Repeat Attempts data is kept or how a User can contest a flag.

Cross-references

contrast (model-proposed): Known Faces checks new faces against past checks and adds a match — Both services compare a new submission with earlier data, but Known Faces compares face geometry while Repeat Attempts compares document data; the notice presents them as separate services with different data categories.