Privacy Policy

We collect the following categories of information:

Account information. Name, work email, company, role, and similar details provided by hiring teams who sign up.

Verification data. When a candidate completes a check, we process their government-issued ID document, a biometric selfie, liveness-detection results, and the resulting match and confidence scores.

Usage data. Log data, device and browser information, and timestamps generated when you interact with the Service.

We use information to operate the verification workflow, release gated interview links after a passing check, generate confidence-scored reports, secure the Service, provide support, and meet legal obligations. We do not sell personal or biometric information.

Biometric verification is performed only with the candidate's consent at the time of the check. Raw face templates and ID images are treated as transient artifacts: they are used to complete the match and are automatically deleted within 7 days. After deletion, only the verification outcome (pass/fail, confidence score, and timestamps) is retained for the hiring team's audit record.

We share verification outcomes with the hiring organization that initiated the check. We may share information with service providers (such as cloud-infrastructure and identity-verification processors) who act on our behalf under contractual confidentiality and security obligations, and where required by law or to protect our legal rights.

The Service is built with encryption (including AWS KMS), least-privilege access controls, and audit logging, on an architecture designed to align with SOC 2 principles. No method of transmission or storage is perfectly secure, but we work to protect your information using commercially reasonable safeguards.

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal information, or to object to certain processing. To exercise these rights, contact us at contact@dokimosid.com. We will respond consistent with applicable law, including U.S. state privacy and biometric-privacy statutes.

Biometric artifacts are deleted within 7 days as described above. Account and audit records are retained for as long as an account is active and as needed to comply with our legal obligations, resolve disputes, and enforce our agreements.

The Service is intended for use by employers and adult job candidates. It is not directed to individuals under the age of 18, and we do not knowingly collect information from children.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service or by other reasonable means.