Data Retention
AgeEvidence retains verification data for the minimum period required by the verification level and applicable law. All data is stored in EU infrastructure (Germany).
Retention by Verification Level
| Level | Retention | Data Stored |
|---|---|---|
age_only | 1 year after expiry | Liveness video, face data, age estimation. No ID documents. |
full_age | 1 year after expiry | Liveness video, ID document images, face data, extracted DOB. |
full_kyc | 7 years | Full archive: liveness video, ID images, face data, legal name, DOB, performer record. Required for 2257 compliance. |
Access and security logs are retained for up to 7 years for auditability and compliance regardless of verification level.
Verification Expiry
Verifications for age_only and full_age levels expire after one year from approval. After expiry, the user must re-verify. The verification data is retained for one additional year after expiry before deletion.
full_kyc verifications do not expire in the traditional sense. The associated performer record must be retained for a minimum of 7 years from creation per 2257 compliance requirements.
GDPR Right to Deletion
Under GDPR, individuals have the right to request deletion of their personal data. AgeEvidence honors deletion requests with the following exception:
- 2257 records are exempt from deletion. Performer records created by
full_kycverifications are legally required to be retained for 7 years. These records cannot be deleted upon request, but can be deactivated.
For age_only and full_age verifications, deletion requests are processed and the data is securely removed from all storage systems.
To request deletion, contact us through the contact form (select Privacy) or contact the platform that initiated the verification.
Record Deactivation
Performer records created by full_kyc verifications can be deactivated but not deleted. A deactivated record:
- Prevents new content from being linked to the record
- Remains in the database for the full 7-year retention period
- Is included in compliance exports and audit trails
- Cannot be reactivated once deactivated
Data Deletion Process
When retention periods expire, AgeEvidence performs the following cleanup:
- Verification media (video, images) is permanently deleted from object storage
- Face descriptors and biometric data are permanently deleted
- Database records are anonymized or deleted
- Audit logs referencing the verification are retained (they do not contain personal data)