Frequently Asked Questions

How do you protect my clientele’s sensitive identification data?

At Iluminai, we prioritize the security and privacy of sensitive client data, including facial recognition and ID scans, through trusted processes and advanced security measures.

• Hosting & Security:
  • All necessary data is encrypted both in transit and at rest using the latest standards and stored exclusively in secure Canadian data centers hosted by DigitalOcean and AWS. These centers, located in Toronto, are certified to SOC 2 and ISO 27001 standards and comply with PIPEDA and PIPA.
  • Access to data is strictly controlled with firewalls, intrusion detection, and multi-factor authentication to present unauthorized access.
• Partnered with Persona: We use Persona, a trusted provider specializing in secure facial recognition and ID scanning. Their system is designed to meet global compliance requirements, including PIPEDA and GDPR. Persona is also a member of the Digital ID & Authentication Council of Canada (DIACC), an organization dedicated to establishing a secure and interoperable framework for digital identification in Canada. This ensures their practices align with Canadian security and privacy standards.
• Data Handling & Deletion: We ensure that sensitive data is processed securely and deleted immediately after each use. Data does not reside on Persona’s servers once the verification process is complete, providing an additional layer of protection.