How we handle your data, and theirs
Certifications, consent, retention, security and the route to dispute a finding. Written for your compliance team.
Certifications
| Certification | Scope |
|---|---|
| ISO 9001:2015 | Quality management across verification operations |
| ISO 27001 | Information security management |
Both are independently audited. Certificates are available to clients and prospects on request.
Consent
We do not start a check without the candidate's consent. The consent record names which checks were authorised, and it is retained with the case. If consent is withdrawn we stop, and we tell the employer we have stopped.
Data handling under the DPDP Act
What we collect
Only what the requested checks require. Identity documents, employment and education details, address, and where the check calls for it, court and financial records.
Why we hold it
To run the checks the employer requested and to evidence the result. Nothing else. We do not sell personal data and we do not use it for advertising or profiling.
Who sees it
The requesting employer, and the GVS staff working the case. Verification sources see only what is needed to confirm a specific fact.
How long we keep it
For the retention period agreed with the client or required by law, whichever is longer, then deleted.
Candidate rights
Access, correction, explanation, withdrawal of consent, and deletion where the law allows. The route to exercise them is on the candidate page.
Security
- Reports and case data are transmitted over encrypted connections.
- Access is role-based. Staff see only the cases they are working.
- The client portal is separate from the marketing site and requires authentication.
- Security incidents are logged, investigated and reported to affected clients.
Accuracy and dispute
Findings are confirmed at the source, not inferred from a database alone. If a candidate disputes a finding we re-verify at the source at no cost, correct the report if we were wrong, and inform the employer.
Grievance contact
Data protection and grievance queries: support@genuineverification.com. Registered office: New Delhi, India. We acknowledge within 3 business days and respond within 30 days.
Due diligence pack
Certificates, security summary and our data processing terms, for your procurement team.
Request the pack