Security & Privacy
Konfir’s approach to security, privacy, and compliance.
Security
Understand Konfir’s security controls, your responsibilities, and how to report security issues.
Security OverviewUnderstand Konfir’s security model, controls, certifications, and trust documentation in one place.
Your security responsibilitiesWhat your organisation should do to keep workspace access and verification outputs secure.
Reporting a suspected security issueHow to contact Konfir if you believe an account, workspace, or verification may be at risk.
Data Protection: Roles & Rights
Data governance in Konfir: GDPR roles, subject rights requests, retention, and third-party partners.
GDPR roles - Controller vs ProcessorClarifies who is responsible for verification data decisions under UK GDPR.
GDPR rights requests (DSARs, deletion, correction)How data subject requests are handled when personal data is processed in Konfir.
Data retention and deletion lifecycleHow long Konfir keeps verification data and what happens when retention ends.
Subprocessors and third-party servicesHow Konfir uses vetted third parties and maintains transparency over data processing partners.