When we provide identity verification services to business customers, we usually act as a processor, processing personal data on your behalf.
In some limited cases, we also act as a controller for our own legal, security, fraud prevention and service management purposes.
What are my duties when I send customers to Vouchsafe?
If you send people to Vouchsafe, you will usually be the controller. This means you will need to:
decide why the check is needed and what your lawful basis is
tell your users about your use of Vouchsafe in your privacy notice
make sure your use of identity checks is necessary and proportionate
have the right contract terms in place with us, including our DPA
handle data rights requests where you are the controller
Where can I find Vouchsafe’s GDPR documents?
Our GDPR documents include:
If you need more help, contact [email protected] or speak to your Vouchsafe customer success manager.