After completing your verification, Konfir may retain certain data to comply with legal and regulatory obligations (e.g., GDPR requests, audits).
During this retention period, Konfir stores your data securely in compliance with GDPR and our data retention policy. After the retention period expires, your data will be deleted unless further retention is required by law.
The length of your retention period is typically set by your verifier, as they are the ‘data controller’ under GDPR legislation. If your verifier has not specified a specific retention period, we apply a default retention period of 7 years, which is in line with industry standards. To query your data retention period, please contact your verifier.
If you give consent for Konfir to store your data for future verifications, then your data will be held indefinitely, or for as long as long as you want us to. If you want to remove your data, you can exercise your right to do so by contacting us, as explained in our article ‘How do I control, manage, or delete my data?’