Security and privacy, by design

Identity data is the most sensitive data your users share. Zoi ID protects it at every step: strong encryption, isolated processing, strict access and short retention.

Privacy by design. Security by default.

The safest data is data you never hold. Zoi ID gives you an answer and keeps the evidence only as long as the rules require.

Face templates: Never stored. Created in memory for one comparison, then gone.
Evidence: Images and videos deleted 90 days after the decision, or sooner.
Encryption: AES-256, with a separate key for every file and every identity record.
Location: Stored in Germany (EU), with encrypted backups in the EU.
AI: Runs in our own infrastructure. No document or face goes to a third-party AI service.
What you receive: Only the fields you need. By default: status, level, valid until and an over-18 answer.

Infrastructure

Dedicated infrastructure in Germany (EU), separate from every other Zoi system.
A global edge network protects all public traffic.
Face and document analysis run in isolated services.
Encrypted backups in the EU, and signed releases verified before they run.

Our own AI, in our own infrastructure

Face, liveness and document analysis run inside Zoi ID. No identity data is sent to a third-party AI service, and AI never decides a case on its own.

Encryption

Encrypted in transit with modern TLS, and at rest with AES-256.
A separate key for every file and every identity record.
Each encrypted item is bound to its own record. Copied to another record, it will not open.
Keys are managed under a written policy and kept apart from the data they protect. Backups are encrypted too.

No face templates

We never store a face template. The numbers used to compare faces exist only in memory during one request.
Software compares faces only with the user's separate consent. Without it, a reviewer compares the photos.
Face analysis runs in an isolated service and keeps images only in memory.
We do not guess ethnicity, emotion or any other trait from a face.

Reviewer access

Only named, trained reviewers get access, with permissions set by role.
Every time a reviewer opens personal data or a file, it is written to an audit log. So is every decision and every admin action.
The audit log is append-only and kept for 10 years.
Government ID numbers are hidden in the console by default and never written to logs.
A possible sanctions or PEP match needs two different reviewers. A reviewer can only decide on the version of the case they have seen.

Sessions and devices

Client tokens are random, tied to one session and short lived. We store only their hash.
Every challenge for the device check, the chip check and the video is random, single use and short lived.
Each upload belongs to a numbered set of evidence. When a step is uploaded again, the checks that used the old file run again.
Chip data is checked on our server against government certificates. Nothing the phone sends is trusted as it is.

How long we keep data

These are the default periods. A legal hold can stop the clock.

Read the retention policy

Data	Kept until
Session never submitted	7 days after it was created.
Open session (processing or in review)	60 days at most, then it expires.
Document images, chip data, video	90 days after the final decision. 24 hours if the person is under the minimum age. At once on withdrawal or erasure.
Identity details (name, date of birth, document number, address)	While the user's account with the partner exists and the identity is not revoked. At most 5 years after the last verification.
Duplicate check keys, decisions and check results without personal data	5 years after the last session, to prevent fraud.
Sanctions screening records	10 years, as sanctions record rules require.
Audit log	10 years.
Backups	30 days.

Every erasure is logged and applied again after any restore from a backup.

Policies and agreements

Put a real person behind every account

Zoi ID is launching soon. Early access partners get sandbox keys, a direct line to our team and a setup that fits their markets.

Request early access Talk to sales

Or write to official@zoi.network