Explain Identity
If you’re using Stripe Identity for ID verification, copy and customize this template to build Frequently Asked Questions (FAQ) content that explains how ID verification works through Stripe to your users.
To obtain Stripe logos, badges, and buttons for your site, visit the Stripe resources page.
Questions with pre-approved copy
Use the pre-approved copy for the answers to these questions in your Stripe Identity FAQ.
Question | Pre-approved copy | Additional information |
---|---|---|
How does identity verification work? | PLATFORM works with Stripe to conduct identity verification online. Stripe builds technology that’s used by millions of companies around the world such as Amazon, Google, and Zoom. Stripe helps with everything from accepting payments to managing subscriptions to verifying identities. Stripe helps PLATFORM confirm your identity by conducting the following checks:
Stripe will ask for your consent before collecting and using your biometric information. They’ll only use your verification data in accordance with the permissions you grant before starting the verification process, and based on their Privacy Policy. Learn more about how Stripe is storing and handling your data. | Update the checks based on the verification methods that you use. Include your privacy policy in your answer as well. Be sure to transparently disclose to your users the information you’re receiving and how you’re using, storing, and sharing it, including the use of cookies if that’s part of your integration. You should also disclose that you use Stripe as a service provider:
|
What are the best practices for a successful verification? | Before starting the verification process, here’s what you need:
The quality of the images captured affects success rates dramatically. Below are a few best practices to help make sure that your verification succeeds:
| We recommend adding these best practices before a user starts the verification process so they know what to expect. |
Who has access to my verification data? | Both PLATFORM and Stripe have access to the information that you submit through the verification flow. We rely on Stripe to help store your verification data. Stripe uses access controls and security standards that are at least as stringent as those used to handle their own KYC and payments compliance data. Learn more about how Stripe handles and stores your data. | Include this question and answer only if you don’t store additional copies of verification data on your systems. Insert your own store and access control policies in the answer. |
Open-ended questions
For the following questions, you can provide your preferred answer. The following table includes additional information about what to include in your answer.
Question | Additional information |
---|---|
Why am I asked to verify my identity? | Provide your preferred answer. Some users might be hesitant to share their ID information, so it’s important to help them understand why you’re asking for this information |
Why was I rejected? | You might want to offer alternative methods for verification if a user disputes their results. |
Can I get verified using a different method? | Privacy laws might require you to provide an alternative verification process that doesn’t use biometric technology if the user doesn’t consent to use of their biometric information. Consult your legal counsel for regional requirements. |
How can I access or delete my verification data? | Provide your data privacy process. The Identity API has a redaction endpoint that allows you to delete the verification data that Stripe Identity stores on behalf of your business. For example, you can use this tool to meet your deletion requirements when an end-user from Europe or California asks you to delete their data, or when you collect an ID from a country such as Germany that requires you to delete an ID card upon completion of the verification even if there’s no deletion request from the end user. If you’ve created additional copies of a user’s data, you might also need to delete these as well. Stripe doesn’t delete data on your behalf when we store the data as your processor, even if your end-user asks us to, because we recognize you must conduct your own legal analysis on whether deletion is appropriate. If your end-user reaches out to us requesting deletion, we’ll respond to the request with respect to any data that we hold as data controller, and also recommend the end-user reach out to you to request deletion. |