Is Veriff safe with your data?
Veriff
Partial disclosure · grade C is 48–59 · high confidence
Scored 50 ± 5 (range 45–55)
That range crosses the C/D cut, so read this app as C or D rather than firmly either. How we grade
Veriff earns a C (50/100) because it discloses its data practices only in part.
#92
of 216 apps ranked
50
score · Security & compliance avg 50
+0
vs category average
Veriff's privacy notice is detailed about how its verification engine and machine learning work, but it routes most end-user rights requests to the customer who commissioned the verification, gives no general retention period, and puts its firmest biometric deletion deadline only in a state-specific section.
What Veriff's privacy policy and terms of service say about your data
Rights run through the customer
Where Veriff processed the data to deliver a verification, the notice says a request to know, delete, correct or port must be submitted to the customer who is the data controller rather than to Veriff, and the rights list itself opens with "depending on where you reside, you may have the right".
No general retention period
Data is kept "for as long as necessary to carry out the purposes for which we originally collected it", with end-user retention set by each customer agreement. No number is given, and the only concrete figures are a one-day demo window and state-specific biometric deadlines.
Training on real session data
Algorithms are built, trained and tested on training sets consisting of real data or anonymized data for internal service improvement, done on a contractual mandate from the customer. No opt-out mechanism is offered to the person being verified.
Named engine and human review
The notice describes a verification engine trained with machine learning, labels each process as automated, semi-automated or human, and states a right to request human intervention or object to a fully automated decision.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: your ownership of generated outputs
- Not stated: shorter retention for AI conversation logs
Veriff privacy rating
Details
- Category
- Security & compliance
- Modalities
- text, image
- Processes biometrics
- Yes
- Policy last updated
- 2026-04-16
- Region scored
- Global / US-default
- Last assessed
- 2026-10-13
Documents examined
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.