Security & Privacy
Konfir’s approach to security, privacy, and compliance.
By Jacob1 author7 articles
Security
Understand Konfir’s security controls, your responsibilities, and how to report security issues.
- Security OverviewUnderstand Konfir’s security model, controls, certifications, and trust documentation in one place.
- Your security responsibilitiesWhat your organisation should do to keep workspace access and verification outputs secure.
- Reporting a suspected security issueHow to contact Konfir if you believe an account, workspace, or verification may be at risk.
Data Protection: Roles & Rights
Data governance in Konfir: GDPR roles, subject rights requests, retention, and third-party partners.
- GDPR roles - Controller vs ProcessorClarifies who is responsible for verification data decisions under UK GDPR.
- GDPR rights requests (DSARs, deletion, correction)How data subject requests are handled when personal data is processed in Konfir.
- Data retention and deletion lifecycleHow long Konfir keeps verification data and what happens when retention ends.
- Subprocessors and third-party servicesHow Konfir uses vetted third parties and maintains transparency over data processing partners.