Onfido Available Services - Trials

Sept. 21, 2022

Any of the below Services can be activated for the Client during atrial period. The Client may activate as a trial any Service listed below by the parties agreeing as such in writing.

Onfido processes the following data on behalf of Client in order to provide the Services (including for fraud detection):

• Searches third party database(s) to identify whether an end user is included in the relevant database(s) and confirms the personal data provided by the end user.

Personal Data Processing

Categories of Personal Data:

1. Full name
2. Date of birth
3. Address and postcode (Client optional)
4. National identifiers where applicable (eg Social Security Number for U.S Users)

• Assesses the likelihood that the identity document provided is genuine.

Personal Data Processing

Categories of Personal Data:

1. Image(s) of the identity document and information describing the identity document
2. Information extracted from the identity document electronically, where applicable

• Compares the face displayed on an identity document with a facial image captured of the end user, to verify that they are the same.

Personal Data Processing

Categories of Personal Data:

1. Image of the end user’s face
2. Image of the face in the identity document

Special Categories of Personal Data:

1. Numerical biometric data

• Compares the face displayed on an identity document with a facial image captured from a video of the end user, to verify that they are the same, while requiring the end user to undergo liveness detection.

Personal Data Processing

Categories of Personal Data:

1. Video of the end user
2. Image of the face in the identity document
3. Transcribed text data from the video clip (if applicable)

Special Categories of Personal Data:

1. Numerical biometric data

• Automatically (and without any human review) compares the face displayed on an identity document with any other image of a face, to verify that they are the same - for repeat end user verification.

Personal Data Processing:

Categories of Personal Data:

1. Image of the end user’s face
2. Image of the face in the identity document

Special Categories of Personal Data:

1. Numerical biometric data

• Automatically (and without any human review) compares the face displayed on an identity document with any other image of a face, to verify that they are the same.

Personal Data Processing:

Categories of Personal Data:

1. Image of the end user’s face
2. Image of the face in the identity document

Special Categories of Personal Data:

1. Numerical biometric data

• (1) Compares the face on an image or video against a database of biometric numerical identifiers of the faces from past checks completed by the Client and alerts if there is a match, and (2) adds the extracted biometric numerical identifier from the face on the image or video to the database in (1).
• For this service, numerical biometric data is used for the purpose of uniquely identifying a natural person.

Personal Data Processing:

Categories of Personal Data:

1. Image or video of the end user’s face
2. Onfido end user unique identifier
3. Check status/outcome and related tracking information

Special Categories of Personal Data:

1. Numerical biometric data

• Searches third party watchlist, politically exposed persons and sanctions databases to identify whether an end user is included in that database.

Personal Data Processing:

Categories of Personal Data:

1. Full name
2. Date of birth (Client optional)
3. Address and post/zip code (Client optional)

• Searches third party watchlist, politically exposed persons, sanctions and adverse media databases to identify whether an end user is included in that database.

Personal Data Processing:

Categories of Personal Data:

1. Full name
2. Date of birth (Client optional)
3. Address and post/zip code (Client optional)

• Checks that a non-ID document is a suitable proof of address.

Personal Data Processing:

Categories of Personal Data:

1. Full name
2. Address and postcode
3. Image of proof of address document and information describing the document

• Classifies identity documents and using optical character recognition technology, returns automatically extracted human-readable data from the identity document.

Personal Data Processing:

Categories of Personal Data:

1. Image of the identity document and information describing the identity document

• For the purposes of Autofill, the Client acknowledges that the list of supported documents will be notified from time to time, and do not currently include all of the supported documents listed on the Onfido website, and that in the event that a document is unsupported, Autofill will not be available.

• Uses the AAMVA Driver’s License Data Verification (DLDV)service (via a third party subprocessor) to search participating US state DMV databases to match an end user’s personal details.

Personal Data Processing:

Categories of Personal Data:

1. Full name
2. Document ID number
3. US state code
4. Optional data fields from the identity document (at Client’s option)

• Compares the face displayed on an identity document with a facial image captured from a video of the end user, to verify that they are the same, while assessing whether the end user in the video is a real person or a presentation attack/spoof.

Personal Data Processing:

Categories of Personal Data:

1. Video of the User
2. Image of the face in the identity document

Special Categories of Personal Data:

1. Numerical biometric data

• Verifies that the PAN provided by the User or Client matches the PAN number found on the database held by the Income Tax Department of the Government of India.

Personal Data Processing:

Categories of Personal Data:

1. Full name
2. Date of birth
3. Personal Account Number (PAN)

• Analysis of device signals, IP address, geolocation, and other fraud signals to assess the likelihood that the User is genuine.

Personal Data Processing:

Categories of Personal Data:

1. IP address and IP address type, including associated geo-location city / region / country level location and detection of any IP masking tools such as a VPN or Proxy
2. Device ID, advertising ID where available, and device fingerprints, including audio and video fingerprint
3. Media itself, as well any related metadata, such as complete EXIF extraction and other embedded metatags in media itself
4. Capture of camera feed and information such as camera name, microphone name, aspect ratio, resolution, frame rate, etc.
5. Information related to device metadata and/or browser headers, including all related information such as OS and browser version, model, brand, manufacturer of the device, user-agent, navigator, screen details, plugins, fonts, memory, WebGL, battery information, language, time zone, etc.
6. Unique identifier assigned to device and used to verify re-use of the device