This is a little Big_Brother-esque for my taste.
Stripe Identity
71–80 of 557 posts
Re: Stripe Identity
#72One of the creepiest products of the last decade. Let's wait for the inevitable data breach.
Re: Stripe Identity
#73At work we do eIDV of customers and we tested 5 companies. One was quality but too expensive and required too large commitments; two couldn't detect badly photoshopped frauds we threw together, another couldn't detect a printed or on-screen copy of a document being captured (vs the real document - difficult to do, but important). The fifth which we're using can detect printed copies of documents around half the time,…
Will you update this thread? I am highly interested in results.
Re: Stripe Identity
#74Does Stripe intend to make a giant online database of international identity documents? Why should we trust Stripe to secure these? It could be Equifax levels of problematic if there would be a intrusion, but I also can't tell how Stripe plans to use this information.
No. 1. Stripe cares tremendously about and knows the importance of security—we’ve learned a lot from securely processing hundreds of billions of dollars in payments annually, and Identity is built from those learnings. (https://stripe.com/docs/security/stripe).
2. Any biometric identifiers that are created to perform the verification are never stored or retained—they are fully removed from all of our systems within 48 hours (usually within minutes).
More on this at https://support.stripe.com/questions/managing-your-id-verifi....
Re: Stripe Identity
#75Having experienced the end-user flow for Identity when doing bot verification on Discord, this was an incredibly seamless product back then, when it was presumably in beta. Can only imagine its even cleaner and faster now its officially released.
Curious, do you recall if it was slow? like, great than 2 seconds or?
Re: Stripe Identity
#76Earlier quoted context omitted.
Yep, Stripe would be the data controller in this situation (and we comply with GDPR). https://support.stripe.com/questions/managing-your-id-verifi...
Out of curiosity, given that this is among the most sensitive PII that can be stored, where is this data located for Stripe? I think this looks like an excellent product and can absolutely see the utility for so many businesses, but as a European I would never want such data to be stored outside of the EU. If there could be flexibility in the location the data is stored I think many European customers would appreciat…
We store data in the US right now (https://support.stripe.com/questions/managing-your-id-verifi... ), but we’ll look into region-specific storage in the future.
Re: Stripe Identity
#77Does Stripe intend to make a giant online database of international identity documents? Why should we trust Stripe to secure these? It could be Equifax levels of problematic if there would be a intrusion, but I also can't tell how Stripe plans to use this information.
I never wanted Equifax to have any of my data, and yet here we are. After the breach, I wouldn’t ever be a paying customer to them if I had a choice. (Indirectly, I am still a “customer” in the sense that they probably still have my data and get new data about me—but apart from canceling all my cards, not sure what choice I have). In comparison, Stripe seems to charge for each product it offers. I think that’s a more…
> In comparison, Stripe seems to charge for each product it offers. I think that’s a more fair and transparent model.
They could be charging you AND creating an international ID database.
Re: Stripe Identity
#78At work we do eIDV of customers and we tested 5 companies. One was quality but too expensive and required too large commitments; two couldn't detect badly photoshopped frauds we threw together, another couldn't detect a printed or on-screen copy of a document being captured (vs the real document - difficult to do, but important). The fifth which we're using can detect printed copies of documents around half the time,…
Why hide the names of the companies you tested?
Re: Stripe Identity
#79Earlier quoted context omitted.
Just what I was thinking. Can Stripe hurry up and go public so I can buy some shares?
I have been thinking the same thing for some time now. Unfortunately, I wouldn't hold my breath. If they are able to stay private, they probably will. It's easier to build a business when you don't have to deal with the hassle and interference of public markets.
What would that do to all the Stripes holding illiquid shares in a private company?
Re: Stripe Identity
#80I really despise this trend of uploading your ID and a selfie for verification. I know it makes sense in some legal frameworks, but beyond that I find it invasive and risky (and rude.)