The Dataless Identity Verification
Provider
- Enabling Self-Sovereign Identity for web3
Fractal ID provides identity verification services without storing user personal sensitive data centrally. Once verified, user’s data is encrypted and stored in idOS: a self-sovereign decentralized storage network, specifically designed for identity data.
How Fractal ID Works
Dateless Identity Verification
After user verification, personal identifiable data will be stored for a 14-day period window to assist users during data provision and verifications, and then permanently deleted from all centralized systems that participated in the identity verification process. This includes any partner providers who are instructed to not store the data in accordance with GDPR.
Decentralized Storage
After identity verification is completed, user data is issued as an encrypted Verifiable Credential in idOS. Fractal ID will only store anonymized system IDs and some metadata. This includes event logs related to API token handling, API data access, session vars, and system calls. These will contain contextual data (timestamp, event type) and details about the event itself (internal anonymized user ID, client ID, ingestion ID).
User-centric compliance
Our solution meets compliance requirements without compromising on user security and privacy. Fractal ID’s clients will be able to access user data from idOS as long as they have an Access Grant from the user (that users may revoke). Fractal ID may also request users for an Access Grant to update a user’s credential, but will not keep access indefinitely.