For the person being verified

Your identity, your key, verified once.

If a business you are joining uses B Group to verify you, you may be offered a button at the end: "save my details". This page explains plainly what that does, what it does not do, and what happens if you say no.

What the vault is

Saving is optional

You can decline. The business that verified you keeps its own record of the check, exactly as it would have anyway, and nothing else happens.

The key stays with you

If you accept, a key pair is created on your device. The private key is protected by your passkey (Face ID, Touch ID, Windows Hello or a hardware key) and, if you choose, by a recovery phrase you write down. Your verified details are encrypted on your device before they are stored.

B Group cannot read your vault

We store only encrypted data and the minimum information needed to route a request you make. We cannot open your vault, cannot sell it and cannot lose it in bulk, because we cannot decrypt it. Neither can anyone who took our database.

You choose what to share, and with whom

When you join another business that uses B Group, you sign in with your passkey, see exactly which details that named business needs and nothing more, and decide whether to share them. The data is decrypted on your device and sent only to that business.

A fresh liveness check every time

Each time you share from your vault, you take a quick live selfie check. This ties the person present today to the identity verified earlier and is required by the rules the receiving business follows.

Erase at any time

You can erase your vault whenever you like. Erasure is cryptographic: the keys are destroyed and the encrypted data can never be recovered. A business that verified you may still have to keep its own record for the period the law requires; that record is theirs, not your vault.

Plain answers

What if I lose my key?: If you have a recovery phrase, you can restore access. If not, the vault cannot be opened by anyone, including us. A lost vault only means doing the verification again next time; it is never a compliance problem for you.
Will I receive marketing?: No. There is no marketing in the vault and B Group does not market to vault users. No business gains access to you through the vault. Reuse happens only when you start it.
Does the first business learn where I go next?: No. It sees only an anonymised count of reuse events and the credit it earned. The business you join sees only what you chose to share.
Is this a financial service?: No. The vault is a data service that lets you hold and reuse your own verified identity. B Group does not provide financial services to individuals.
Where is my data processed?: In the European Union, with regional options as they become available. Your data stays in your region.
What are my rights?: You can access, export, restrict and erase your vault at any time. See the privacy notice for how to exercise your rights and how to contact the Data Protection Officer.