How Does Recheck Protect My Information?

Uploading a driver's license and selfie is a sensitive process that involves your personal information, and we understand the importance of protecting it. That's why data security and privacy are foundational to how Recheck operates.

We’ve partnered with Persona, one of the most trusted identity verification providers in the world. Persona is used by companies like Square, DoorDash to verify millions of users securely and privately.

This page outlines how your data is protected, why identity verification is required, and how Recheck and Persona work together to handle your information responsibly.

We built Recheck’s identity verification process with data security at the forefront, leveraging Persona’s infrastructure and our own strict data governance.

Military-Grade Encryption:

• Data in transit is encrypted using TLS 1.2+

• Data at rest is encrypted using AES-256, with regular key rotation

• Each individual data element is encrypted with its own unique key and initialization vector

• Industry Certifications & Privacy Compliance

Persona meets global data security and privacy standards:

• SOC 2 Type II

• ISO 27001

• GDPR and CCPA/CPRA compliance

• Privacy by design, with regular privacy impact assessments

Tight Access Controls & Monitoring:

• Role-based, least-privilege access to sensitive data

• All access is audit-logged and monitored

• Persona’s infrastructure is secured with VPNs, MFA, IAM, and IP whitelisting

• Hosted in SOC 2 / ISO-accredited data centers with 24/7 monitoring

Proactive Risk Management:

• Continuous vulnerability scanning and penetration testing

• Documented incident response protocols

• Environments are strictly separated (prod, test, dev) and independently secured

Recheck and Persona collect:

• Government-issued ID (front and/or back)

• A selfie photo (for facial match)

• Contact information (e.g. name, phone, email)

• Work affiliation (e.g. employer, role)

This data is collected solely for identity verification and compliance purposes. It is never used for advertising, sold to third parties, or shared beyond what’s necessary to verify and maintain platform integrity.

Once verified, your record becomes part of the Recheck Registry:

• You are issued a Recheck ID - a persistent identity used across financing platforms

• Your verification status and affiliated data may be shared with Recheck partners (e.g. lenders) for legitimate business purposes

• This improves accountability and reduces fraud across the ecosystem
  

If you have any additional questions, please contact support@recheck.co.