Personal Info & Security
Name
We check IDs from all over the world and try to set global standard. For this we have one principle for name as follows.
Name is handled in fullname format, do not specify first name, last name or middle name.
On ID document, English written information has the first priority, name included.
Among names, middle name is not mandatory.
Middle name
Middle names are often expressed in initials or abbreviated form even on ID cards, making it difficult to confirm the exact name.
Also, from an AML perspective, middle name does not play important role. AML system is built to screen risky person with only first name and last name.
From the guideline of OFAC(Office of Foreign Assets Control), checking users' middle name is not required, but "risk based" decision that varies from service to service.
Personal Info
With the use of ARGOS KYC service, clients and ARGOS will have the status of 'Data Controller' and 'Data Processor' as referred in GDPR(European Data Protection Law).
Data controller assumes most of the responsibility for protecting and respecting the customer's personal information and rights. The data processor, ARGOS, is delegated some of the tasks related to customer verification by the controller. In this case, the customer, who is the data dontroller, has an obligation to verify and audit whether the Data Processor, ARGOS, who has been entrusted with the work, is properly carrying out customer verification.
Who is 'Data Controller'?
The European data protection law, GDPR, distinguishes the entities handling data as 'Controller' and 'Processor'.
Controller: determines the purposes and means of processing personal data. Processor: processes personal data on behalf of the controller.
Establishing a Privacy Policy
The responsibility to establish policies related to customer service, collecting personal info falls on the controller and can not be delegated by the processor, ARGOS. Therefore, create a privacy policy website for your service and share the URL with us. Then we will add hyperlinks on liveform start page as shown below.
Deleting Personal Info
ARGOS processes requests to delete personal info of users(KYC submitters) in accordance with GDPR. The procedures is as follows:
Requests are only accepted through customer support.
We verify the user through email reply.
We notify all user data associated with the account based on the email will be deleted.
Within one week of the notification, deleting all user data will be completed.
Security
Internal Firewall
Please register the following three addresses:
admin.argoskyc.com
https://l8flh1ihle.execute-api.us-east-1.amazonaws.com
https://cognito-idp.us-east-1.amazonaws.com
AROGS's IP Address
Since we provide services in serverless environment, we do not have fixed IP address. In case where it is necessary for IP-based firewall, there have been a case using a separate public relay server.
Last updated
