Security and data

What isCredible stores, for how long, and who can see it.

What we store#

The verification result and the data you sent, so you can review decisions in the dashboard.
Identifiers such as device IDs, email addresses, IP addresses and payment fingerprints, so returning users can be recognised. These expire automatically after about a year.

History is kept per account. Data you send is only used to make decisions for your account and is never compared with, or shown to, other customers.

Never send passwords, full card numbers, CVV codes or government ID numbers. Use your payment processor's card fingerprint instead of card details.

All API traffic uses HTTPS. API keys are scoped to one account and can be revoked at any time.