Title
Create new category
Edit page index title
Edit category
Edit link
Is My Data Safe with Sumsub ID
Yes. Sumsub ID requires email verification and a face scan before anyone can access your stored documents or share them. Your documents are encrypted, shared only with your explicit permission, and protected by real-time fraud monitoring.
How your account is protected
Every sensitive action in your Sumsub ID account requires a face scan — a quick selfie check that confirms you are the person who owns the account. This applies to:
Sharing documents during a verification;
Viewing full document details in your account;
Downloading your documents;
Downloading all your personal data.
On top of the face scan, you must verify your email address each time you sign in. This two-layer approach — email verification plus face scan — prevents unauthorized access even if someone gains access to your email.
You are only ever asked to share the specific documents an app needs for its verification. Before any sharing happens, you see exactly what will be shared and must give explicit permission.
How Sumsub detects and prevents fraud
Sumsub monitors for identity fraud in real time using sophisticated behavioral analysis across the Sumsub ecosystem of more than 4000 customers. This may lead to blocking a Sumsub ID account if we suspect fraudulent activity.
Sumsub ID also offers a feature to help you monitor for fraudulent activity in real-time. If someone uploads documents at another app that match the documents stored in your Sumsub ID, you receive an email notification with the details.
If you did not initiate that verification, you can click "This wasn’t me" on the verification detail page. Sumsub will block that verification immediately to protect your identity.
You can review all verification activity — both verifications you initiated and ones that matched your documents — in the Verification history tab at id.sumsub.com.
How Sumsub detects and prevents fraud
Sumsub protects your documents with:
AES-256 encryption for stored data and HTTPS with TLS 1.2/1.3 for data in transit.
iBeta Level 2 certification: protection against deepfakes, masks, and spoofing attacks.
ISO/IEC 29115: high-assurance digital identity verification standards.
ISO 27701: strict privacy controls for personal data.
SOC 2 Type 2: audited proof that security infrastructure is effective around the clock.
GDPR compliance: Sumsub follows EU and UK data protection principles.
If you want a copy of all the personal data Sumsub holds about you, you can download it directly from your account settings. See Managing Sumsub ID for step-by-step instructions.