How Legion Handles Your KYC and Proof of Address Data

Legion uses Veriff as our trusted third-party verification provider to process all Know Your Customer (KYC) and Proof of Address (POA) checks. Below is Veriff’s direct explanation of how your information is handled, stored, and protected.

All verification data is stored securely within the European Economic Area (EEA).
For enterprise clients (such as Legion), the retention periods are configurable based on our specific contract with Veriff, and the data is permanently deleted once that period expires.

Veriff uses vetted sub-processors, and this processing is done under strict data processing agreements.
You can find a complete list of these sub-processors here:
👉 Sub-Processors Used by Veriff

Veriff processes this data solely for providing verification services, as outlined in their Data Processing Agreement:
👉 Veriff Data Processing Addendum

As the client, Legion maintains full access to verification results and session data through our integration with Veriff.

Veriff is fully GDPR compliant, supporting all standard data subject rights (including access, rectification, and erasure).
Data deletion options are available upon request.
More details can be found here:
👉 Veriff GDPR Information

If an end user submits a data deletion request, Veriff asks that it be sent to the company (Legion) for whom the verification was completed.
If Veriff can locate the end user’s data, they will make reasonable efforts to forward the request to the respective company.

For a full overview of Veriff’s privacy and security documentation, please see:

For privacy inquiries related to your verification:

If you have completed verification for Legion and wish to make a privacy-related request, please contact Legion Support and we will forward your request to Veriff.