{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"veriff","name":"Veriff","domain":"veriff.com","category":"AI tools","one_liner":"Veriff is a global AI-native identity platform building trust online","trust_center_url":"https://trust.veriff.com/","security_page_url":null,"url":"https://certreports.com/vendors/veriff/security","last_verified_at":"2026-09-18T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"soc-2","framework_name":"SOC 2","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a SOC 2 Type II report on its trust centre (Vanta) as of 18 Sep 2026.","kind":"type2","status_text":"Vendor states SOC 2 Type II on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/veriff/soc-2","evidence":[{"source_type":"trust_center","source_name":"Veriff trust centre (Vanta)","url":"https://trust.veriff.com/","fetched_at":"2026-09-18 23:29:35.741011+00","content_hash":"55f6c3fc86a9f52bfc0c7127e8e1d616a849762fa2e921593097c26200440f66","wayback_url":null,"quote":"SOC 2 Type II","confidence":1}]},{"framework":"gdpr","framework_name":"GDPR","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states a data processing agreement on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states GDPR on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/veriff/gdpr","evidence":[{"source_type":"trust_center","source_name":"Veriff trust centre (Vanta)","url":"https://trust.veriff.com/","fetched_at":"2026-09-18 23:29:35.741011+00","content_hash":"55f6c3fc86a9f52bfc0c7127e8e1d616a849762fa2e921593097c26200440f66","wayback_url":null,"quote":"GDPR","confidence":1}]},{"framework":"iso-27001","framework_name":"ISO/IEC 27001","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27001 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27001:2022 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/veriff/iso-27001","evidence":[{"source_type":"trust_center","source_name":"Veriff trust centre (Vanta)","url":"https://trust.veriff.com/","fetched_at":"2026-09-18 23:29:35.741011+00","content_hash":"55f6c3fc86a9f52bfc0c7127e8e1d616a849762fa2e921593097c26200440f66","wayback_url":null,"quote":"ISO 27001:2022","confidence":1}]},{"framework":"cyber-essentials","framework_name":"Cyber Essentials","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an Cyber Essentials certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states UK Cyber Essentials 3.2 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/veriff/cyber-essentials","evidence":[{"source_type":"trust_center","source_name":"Veriff trust centre (Vanta)","url":"https://trust.veriff.com/","fetched_at":"2026-09-18 23:29:35.741011+00","content_hash":"55f6c3fc86a9f52bfc0c7127e8e1d616a849762fa2e921593097c26200440f66","wayback_url":null,"quote":"UK Cyber Essentials 3.2","confidence":1}]},{"framework":"iso-27017","framework_name":"ISO/IEC 27017","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27017 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27017 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/veriff/security","evidence":[{"source_type":"trust_center","source_name":"Veriff trust centre (Vanta)","url":"https://trust.veriff.com/","fetched_at":"2026-09-18 23:29:35.741011+00","content_hash":"55f6c3fc86a9f52bfc0c7127e8e1d616a849762fa2e921593097c26200440f66","wayback_url":null,"quote":"ISO 27017","confidence":1}]},{"framework":"iso-27018","framework_name":"ISO/IEC 27018","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an ISO/IEC 27018 certificate on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states ISO 27018 on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/veriff/security","evidence":[{"source_type":"trust_center","source_name":"Veriff trust centre (Vanta)","url":"https://trust.veriff.com/","fetched_at":"2026-09-18 23:29:35.741011+00","content_hash":"55f6c3fc86a9f52bfc0c7127e8e1d616a849762fa2e921593097c26200440f66","wayback_url":null,"quote":"ISO 27018","confidence":1}]},{"framework":"ccpa","framework_name":"CCPA / CPRA","state":"vendor_stated","state_label":"Vendor-stated","sentence":"Vendor states an CCPA / CPRA privacy notice on its trust centre (Vanta) as of 18 Sep 2026.","kind":null,"status_text":"Vendor states CCPA on its trust centre","issued_at":null,"expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-18","under_review":false,"source":"vanta","url":"https://certreports.com/vendors/veriff/security","evidence":[{"source_type":"trust_center","source_name":"Veriff trust centre (Vanta)","url":"https://trust.veriff.com/","fetched_at":"2026-09-18 23:29:35.741011+00","content_hash":"55f6c3fc86a9f52bfc0c7127e8e1d616a849762fa2e921593097c26200440f66","wayback_url":null,"quote":"CCPA","confidence":1}]}],"brief":null,"legal_docs":[{"kind":"subprocessors","url":"https://trust.veriff.com/","availability":"public","detail":"16 subprocessors listed on the trust centre","as_of":"2026-09-18"},{"kind":"privacy","url":"https://www.veriff.com/privacy-policy","availability":"public","detail":null,"as_of":"2026-09-18"}],"subprocessors":[{"name":"Amazon Web Services EMEA SARL","domain":"amazon.com","purpose":"Storage, computing and media processing","location":"EEA","vendor_url":"https://certreports.com/vendors/amazon/security"},{"name":"Data Innovation S.A.S.","domain":"datainnova.co","purpose":"Information verification against local authorities' data source.","location":"Colombia and USA","vendor_url":null},{"name":"EXLService (Ireland) Limited","domain":"exlservice.com","purpose":"Review support for verification services ","location":"India","vendor_url":"https://certreports.com/vendors/exl-service/security"},{"name":"FIMPE Fideicomiso F/00185","domain":"fimpe.org","purpose":"Information verification against external data sources, e.g. Mexico local authorities' registries.","location":"Mexico","vendor_url":null},{"name":"Google Cloud EMEA","domain":"google.com","purpose":"Media processing","location":"EEA","vendor_url":null},{"name":"Hotjar Limited","domain":"hotjar.com","purpose":"Fixing bugs and improving customer's UX","location":"EEA and US","vendor_url":null},{"name":"IDMERIT LLC","domain":null,"purpose":"Information verification against external data sources","location":"US","vendor_url":null},{"name":"IVXS UK LTD, trading as COMPLYADVANTAGE","domain":"complyadvantage.com","purpose":"PEP and sanctions functionalities","location":"UK and Ireland","vendor_url":"https://certreports.com/vendors/ivxs-technology-sg-pte-ltd/security"},{"name":"London Stock Exchange Group plc","domain":"lseg.com","purpose":"Information verification against external data sources","location":"EEA","vendor_url":null},{"name":"Messente Communications OÜ","domain":"messente.com","purpose":"End-user communication solutions","location":"EEA","vendor_url":null},{"name":"Nufi Inc","domain":"nufi.mx","purpose":"Information verification against external data sources","location":"USA and Mexico","vendor_url":null},{"name":"Ocrolus, Inc.","domain":"ocrolus.com","purpose":"Proof of address extraction","location":"India and USA","vendor_url":null},{"name":"Resistant AI, s.r.o.","domain":"resistant.ai","purpose":"Proof of Address Fraud Check","location":"EEA","vendor_url":null},{"name":"SFDC Ireland Limited (SalesForce)","domain":"salesforce.com","purpose":"Customer support","location":"EEA","vendor_url":null},{"name":"Twilio Ireland Limited","domain":"twilio.com","purpose":"End-user communication solutions","location":"EEA, storage in the US","vendor_url":"https://certreports.com/vendors/twilio/security"},{"name":"Veriff Spain S.L., Veriff UK Ltd, Veriff Inc., Veriff Brazil Ltda.","domain":"veriff.com","purpose":"Provide functions for Veriff’s identity verification service provision","location":"Data storage in EEA (Ireland). Processing in the EEA, the UK, the US and Brazil","vendor_url":"https://certreports.com/vendors/veriff/security"}],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-19T10:48:20.250Z"}