Document and Biometric Verification Privacy Notice

Document & Biometric Verification Privacy Notice

Effective date: June 19, 2026

Welcome. You’re in the right place to learn about how Socure Inc. (collectively, “ Socure,” “ we,” “ us,” or “ our”) uses personal information to provide identity verification and fraud prevention products and services (the “ Services”) to business customers and prospects (“ Customers”). This notice covers our Predictive Document Verification (“ DocV”) solution. This Document & Biometric Verification Privacy Notice (“ Privacy Notice”) addresses

Subject to applicable law, we may update this Notice from time to time by publishing a new version on this website. Socure also maintains a Global Privacy Policy that applies to all our Services. If our Customers use DocV, both the Global Privacy Policy and this Privacy Notice apply.

How DocV Works

When you interact with DocV, we ask for your consent to Socure’s DocV Terms of Use and this Privacy Notice. If you decline to consent, the transaction is canceled, which means that Socure does not collect personal information from you. Because Socure is a service provider, you will need to contact the Socure Customer who sent you to DocV to discuss the alternatives they provide to automated identity verification. If you consent, you will be asked to submit one or more photographs of your identity document (e.g., driver’s license front and back or passport) and your selfie, which may include multiple frames or video capture. Our Customer may also want you to provide additional documents like a utility bill. While you capture and submit your photographs or documents, information about your device and how you interact with it may be collected automatically to help us detect unusual or suspicious activity.

Socure uses machine learning and artificial intelligence to help you capture quality photographs, to analyze the photographs and documents you submit, and the device you use to submit the photographs and documents. Your photographs and biometric information may be analyzed using facial verification or facial recognition to enable DocV to predict the answer to several questions relating to identity verification and fraud prevention.

Personal Information We Collect (and the Sources)

For DocV, Socure may collect personal information about you from our Customers, from your device, from you, from data vendors, and/or from our third-party service providers. The categories of personal information we collect when you interact with DocV are outlined below, together with information about the sources.

Categories of Personal Information Sources of Information Collected
Identifiers, such as legal name, alias or nickname, mailing or physical address... Customers may provide this information to Socure...
Identity Documents and Images, including selfies... Customers may provide this information...
Additional Documents requested of you... You provide this information...
Biometric information, such as facial signatures... You provide this information...
Device, Browser, and Network Information You and Your Device may automatically provide this information...
Behavioral data and inferences about how you typically interact... You and Your Device may automatically provide this information...
Characteristics of protected classifications, such as age... Customers may provide this information to Socure...

California Residents: Under the California Consumer Privacy Act (CCPA)...

Where We Store And Transfer Your Personal Information

Your personal information is stored in the United States...

How We Use Your Information

We use your personal information in accordance with law and our customer contracts to...

The following is a non-exhaustive list of examples illustrating how Socure uses your personal information...

How We Disclose Your Information

Recipients of Personal Information and Purpose(s) Categories of Personal Information Disclosed
Customers and their service providers - Identifiers
- Characteristics ...
Third-Party Service Providers... - Identifiers
- Biometric information (cloud storage only)
- ...
Corporate Subsidiaries and Affiliates... - Identifiers
- Biometric information
- ...

How Long We Retain Your Information

We have seen some fraudsters create hundreds of fake identity documents. According to the analysis conducted by Socure, the following schedules outline Socure’s maximum retention periods...

Categories of Personal Information Retention Period
Identifiers No more than 7 years from collection
Biometric information No more than 3 years from your last interaction
... ...

Special Notice re Data Rights Requests: ...

How We Protect Your Information

Socure uses commercially reasonable physical, electronic, and procedural safeguards...

Your Data Rights

Based on where you reside, you may be afforded one or more of the following data rights...

How to Exercise Your Data Rights

To exercise your rights as they relate to Socure’s data vendor data...

Lawful Bases for Processing (Non-U.S. Persons)

Residents of Canada: Your personal information is processed with your express consent.

Residents of the United Kingdom or European Economic Area: ...

Data Privacy Frameworks (UK, EEA, Switzerland only)

Socure complies with the EU-U.S. Data Privacy Framework...

How to Contact Us

If you are having trouble submitting your documents or need help troubleshooting...

To contact the Socure Privacy team...