Last updated: July 2026
Overview
Verita provides identity-verification (KYC) and business-verification (KYB) technology to banks and financial institutions. When a person verifies their identity, we process their document and biometric data on behalf of the institution they are applying to. That institution is the data controller and decides why and how the data is processed; Verita acts as a processor on its instructions.
What we collect
To verify identity and detect fraud, the following may be collected during a verification session, depending on how the check is completed:
- Face / selfie photo
- A selfie liveness video confirming a real, present person
- Images of the identity document, including the machine-readable zone (MRZ)
- Data read from the document’s NFC chip, where supported
- Flash-pair frames (paired photos taken with and without the screen flash) used to detect spoofing
- Co-presence dual-camera frames captured from the front and back cameras at the same time
- A wide-context frame that captures the immediate surroundings during capture
- Device and attestation signals confirming a genuine, untampered device
- Behavioural and sensor telemetry from the device during the session
- Personal details read from the document, such as name, date of birth and document number
Why we collect it
Data is used to verify identity, meet Know-Your-Customer (KYC) and anti-money-laundering (AML) obligations, and prevent identity fraud and impersonation for the institution the person is applying to. The anti-spoofing captures (liveness video, flash-pair, dual-camera and wide-context frames) and device signals are used only to confirm that a real, present person is completing the check.
Legal basis
Processing is carried out to comply with the identity-verification and anti-money-laundering duties that apply to financial institutions, and on the basis of the consent given at the start of the check. In Côte d’Ivoire this processing is governed by Law No. 2013-450 on the protection of personal data, overseen by the ARTCI, together with BCEAO and CENTIF sector rules.
How long we keep it
Verification data is retained for as long as the institution needs it to manage the relationship and meet its legal record-keeping obligations, and is then deleted or anonymised. Raw anti-spoofing captures are kept only for the period needed to reach and support the verification decision. Exact retention periods are set by the institution as the controller.
Your rights
Under Law No. 2013-450, the data subject has the right to:
- Access: ask what personal data is held about them
- Rectification: ask for inaccurate or incomplete data to be corrected
- Erasure: ask for their data to be deleted, subject to the institution’s legal retention duties
Who processes your data
The verification is carried out on behalf of the applicant’s bank or institution, which is the data controller. Verita operates the verification technology as a processor acting on the controller’s instructions. Data is kept isolated per institution and access is restricted to authorised personnel.
Contact
To exercise your rights or ask a question about this notice, contact your institution’s data-protection contact, or reach us at [email protected]. You may also lodge a complaint with the ARTCI, the Ivorian data-protection authority. A fuller data-processing agreement and impact assessment are maintained for institutions and their auditors; this page is a plain-language summary.