Summary
To create your verification, Konfir collects data from your trusted sources (e.g. HMRC, Open Banking, Payroll) to confirm who you worked for, when, and (if needed) how much you earned.
Konfir only collects the information you explicitly consent to share, and this data is used solely to confirm your employment or income so your verifier can make a decision. Nothing else is accessed, shared, or stored beyond that purpose.
What data we collect
The specific data collected depends on your verifier’s request and the sources you connect, but may include:
Identity details: name, date of birth, National Insurance number, and contact details
Employment history: employer names, start and end dates, job titles (if available)
Employment gaps: periods without work or related context (if available)
Income details (if requested): amount, frequency, and source of income
We don’t collect or share unrelated personal data, full bank statements, or any information from outside your connected sources.
How we collect it
HMRC: PAYE and Income Tax employment records
Banking: limited transaction data identifying salary payments from employers
Payroll: employment and pay records held by your employer’s payroll system
Each connection is one-time only. Konfir never stores your login details and cannot reconnect to your accounts after your verification is complete.
Why we collect it
Your verifier needs verified information to confirm your employment or income accurately and securely.
Konfir replaces traditional references or manual document uploads with a faster, consent-driven digital check - improving privacy, fairness, and speed.
That’s all your data is used for - no profiling, marketing, or secondary use.
Your controls and privacy
You decide which sources to connect, and consent is required every time.
Data access ends immediately after retrieval - no ongoing or background sharing.
All data is encrypted and handled in line with UK GDPR, Data Protection Act (2018), and UKDIATF standards.
For details on your rights or how to request access or deletion, see How do I control, manage, or delete my data?