Trust and data

How Globba Verify handles identity data

Identity numbers open doors to people’s money and lives. Globba Verify is built to touch as little of that data as a check needs, and to keep a clear record of every check that happens.

What we keep

• For each check: the type, a keyed hash of the identity number, its last two digits, the match results, the purpose, your consent reference, method and time, your customer reference, and timings.
• For your account: your business details, the people who sign in, your API keys (as hashes), your balance and its movements, and an audit trail of actions.

What we don’t keep

• Full identity numbers. They are used for the check and never written to our database or logs.
• The record held by the identity source: names, dates, photos, phone numbers or addresses. We compare it with what you sent and discard it.
• Your API keys in readable form. A key is shown once, when it is created.

Who is responsible for what

Your business decides why a person is checked and is responsible for collecting their consent. Globba Verify processes the check on your behalf, and only for the purposes your account is approved for. Checks are carried out through licensed identity data providers under contract with Globba Technologies.

Controls on every request

• Consent details are required, and stale or future-dated consent is refused.
• Each business is approved for named purposes; other purposes are refused.
• Live checks are switched on per business and per check type, after review.
• Test keys never reach real records.
• All traffic is encrypted in transit; keys can be revoked at once.

Questions and requests

Write to hello@globbahq.com. Globba Verify is a product of Globba Technologies Limited (RC 9856238), Abuja, Nigeria, and is run under the Nigeria Data Protection Act 2023.