Privacy Policy

Last updated September 16, 2026

Idenza, Inc. ("Idenza," "we," "us," or "our") provides software and services that help businesses conduct identity, fraud, anti-money laundering, sanctions, and other compliance activities. This Privacy Policy explains how we collect, use, disclose, and protect personal information through our website at https://www.idenza.ai (the "Website"), our hosted applications, and related services (collectively, the "Services").

Our role depends on the context. We make decisions about personal information collected through the Website, for sales and business communications. When a customer submits or makes personal information available to us for fraud or compliance services, we process that information on the customer's behalf and under its instructions.

1. Scope and our role

This Policy applies when Idenza determines why and how personal information is processed, including information about Website visitors, prospective customers, customer representatives, and authorized users of the Services.

When we process personal information submitted or made available by a customer ("Customer Data"), the customer is generally the controller or business and Idenza is its processor or service provider. The customer decides why the information is processed, is responsible for providing required notices, and handles requests from the individuals concerned. Our processing of Customer Data is governed by the applicable customer agreement, data processing addendum, and customer instructions. If this Policy conflicts with those terms regarding Customer Data, those terms control.

If you have a relationship with one of our customers and have questions about information that the customer provided to Idenza, please contact that customer. We will assist the customer with privacy requests as required by our agreement and applicable law.

2. Personal information we collect

The personal information we collect depends on how you interact with Idenza and how a customer configures the Services. Not every category below applies in every case.

Information you provide to Idenza

Business contact information, such as name, business email address, company, position, telephone number, and organization type.
Information included in demo requests, messages, support requests, and other communications.
Customer account information, such as username, authentication information, role, permissions, and account preferences.

Information collected automatically

Internet and device information, such as IP address, browser type, operating system, device identifiers, and approximate location derived from an IP address.
Usage and log information, such as access times, pages or features used, authentication events, audit logs, error reports, and diagnostic information.
Cookie and similar-technology information as described in Section 6.

Customer Data

Customers may provide personal information about their consumers, employees, beneficial owners, counterparties, or other individuals. Depending on the services requested, Customer Data may include:

Identity and contact information, dates of birth, government identification information, photographs, and identity-verification results.
Business ownership, control, and beneficial-owner information.
Account, wallet, transaction, payment, counterparty, and related financial information.
Device, browser, IP address, location, login, and account-activity information.
Sanctions, politically exposed person, adverse-media, watchlist, and blockchain-screening information.
Risk indicators, alerts, scores, case records, investigation notes, decisions, supporting documents, and audit records.

Information from other sources

We may receive information from customers, identity-verification and screening providers, public records and databases, sanctions and watchlist sources, blockchain analytics providers, and other sources selected by us or our customers.

3. How we use personal information

Information Idenza controls

We use personal information collected for our own business purposes to:

Respond to inquiries, schedule demonstrations, and communicate about the Services.
Create and administer customer accounts, authenticate users, and manage permissions.
Provide support, maintain the Services, diagnose problems, and improve performance.
Protect the Services, customers, and Idenza against misuse, security threats, and fraud.
Maintain business records, enforce agreements, and comply with legal and regulatory obligations.
Send business and product communications, subject to applicable law and your communication choices.

Customer Data

We process Customer Data to provide the services selected by the customer, including to:

Perform identity, business, sanctions, fraud, anti-money laundering, and other compliance checks.
Monitor activity; generate risk indicators, scores, and alerts; and support investigations and case management.
Provide reports, audit records, and other customer-requested outputs.
Secure, support, troubleshoot, validate, and maintain the Services.
Follow the customer's documented instructions and meet applicable legal obligations.

Models and service improvement

Where permitted by the applicable customer agreement, we may use Customer Data to configure, operate, test, validate, and improve detection capabilities used to provide the Services to that customer. We may use aggregated or de-identified information to evaluate and improve the Services and develop generally applicable detection capabilities. We do not use identifiable Customer Data to train generalized models for other customers unless the contributing customer expressly authorizes that use and applicable law permits it. We do not attempt to re-identify information that has been de-identified, except where permitted by law to test whether the de-identification measures are effective.

Automated processing

The Services may use rules, statistical methods, machine learning, or other automated processes to produce risk indicators, scores, alerts, or recommendations for customers. These outputs support the customer's fraud and compliance activities. The customer determines how to use the outputs and is responsible for decisions concerning its consumers or other individuals. Questions about a customer's decision should be directed to that customer.

4. Legal bases for processing

Where laws in the European Economic Area, United Kingdom, or similar jurisdictions apply to processing for which Idenza is the controller, we rely on one or more of the following legal bases: performance of a contract; our legitimate interests in operating, securing, supporting, and improving our business and Services; compliance with legal obligations; and consent where required. Where Idenza acts as a processor, the customer determines the applicable legal basis.

5. How we disclose personal information

We may disclose personal information in the following circumstances:

Service providers and subprocessors. We use providers that support hosting, infrastructure, identity verification, screening, security, communications, support, analytics, and other business functions. They may process information only for the services they provide to us and subject to contractual restrictions.
Customers and authorized users. We make Customer Data and related outputs available to the customer that provided the data and to users the customer authorizes.
Professional advisers. We may disclose limited personal information to attorneys, auditors, insurers, accountants, and other professional advisers where reasonably necessary for legal, audit, insurance, or compliance purposes and subject to appropriate confidentiality obligations.
Legal and safety purposes. We may disclose information when we reasonably believe disclosure is required by law or necessary to protect rights, safety, security, or the integrity of the Services.
With direction or consent. We may disclose information when a customer directs us to do so or when the person concerned consents.

Idenza does not sell personal information.

6. Cookies and similar technologies

The Website and Services may use cookies and similar technologies that are necessary for site operation, authentication, security, preferences, and basic performance measurement. These technologies may collect device, usage, and log information described above. You may control cookies through your browser settings, although disabling necessary cookies may prevent parts of the Website or Services from working.

Idenza does not use advertising cookies or tracking technologies to serve targeted advertisements. Because there is no uniform standard for browser-based Do Not Track signals, the Website does not respond to those signals. Where applicable law requires recognition of an opt-out preference signal, we will process that signal as required.

7. Data retention

We retain Website, account, and business-contact information for as long as reasonably necessary to respond to inquiries, provide and secure the Services, manage the business relationship, maintain appropriate records, resolve disputes, and meet legal obligations.

We retain and delete Customer Data in accordance with the applicable customer agreement, the customer's instructions, and legal requirements. Residual copies may remain in protected backups until overwritten through the ordinary backup cycle. We may retain aggregated or de-identified information where permitted by law and contract.

8. Information security

We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, alteration, loss, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Customers and authorized users are responsible for protecting their credentials and notifying us promptly of suspected unauthorized access.

9. International processing

Idenza is based in the United States. Personal information may be processed in the United States and in other countries where we or our service providers operate, subject to customer-specific location commitments. Where required, we use appropriate safeguards for international transfers, such as contractual protections approved by the relevant authorities.

10. Your privacy rights and choices

Depending on where you live and subject to applicable exceptions, you may have the right to request access to, correction of, deletion of, or a copy of personal information that Idenza controls. You may also have the right to object to or restrict certain processing, withdraw consent, appeal our response to a request, or lodge a complaint with a privacy regulator. We will not discriminate against you for exercising an applicable privacy right.

To exercise a right concerning information Idenza controls, contact us using the details in Section 13. We may need to verify your identity and authority before completing a request. An authorized agent may submit a request where applicable law permits, but we may require proof of authorization and identity verification.

Customer Data requests. If your request concerns information that an Idenza customer submitted or made available to us, please contact that customer directly. If we receive such a request, we may refer it to the appropriate customer and assist the customer as required by law and contract.

Marketing communications. You may opt out of marketing emails by using the unsubscribe link in the message or contacting us. We may still send non-marketing communications concerning an account, transaction, security issue, or business relationship.

11. Children

The Website and Services are intended for businesses and are not directed to children under 18. We do not knowingly collect personal information directly from children through the Website. A customer may submit information relating to a minor when legally permitted and necessary for the customer's fraud or compliance activities. In that situation, the customer is responsible for having the authority and legal basis to provide the information, and Idenza processes it under the customer's instructions.

12. Changes to this Policy

We may update this Policy to reflect changes in our practices, Services, or legal obligations. We will post the updated Policy on the Website and revise the last-updated date above. If a change is material, we may provide additional notice as required by law or our agreements.

13. Contact us

Questions or requests concerning this Policy may be sent to privacy@idenza.ai