OneSpan Identity Verification

The typical implementation process for OneSpan Identity Verification software involves the following steps:

1. Assessment and Planning: Evaluate business requirements and define objectives for implementation. This stage includes stakeholder alignment and project planning.

2. Solution Design: Customize the software to meet business needs, such as integrating workflows, branding, and compliance requirements.

3. Integration and Configuration: Integrate the software with existing systems (e.g., CRM, ERP) and configure identity verification features to align with the organization's use cases.

4. Testing: Conduct functional and security tests to ensure smooth performance and compliance with industry standards.

5. User Training: Train end-users and administrators on utilizing the platform effectively.

6. Deployment: Deploy the software in a live environment, enabling identity verification processes.

7. Post-Implementation Support: Provide ongoing technical support, updates, and performance monitoring.

OneSpan Identity Verification can be customized to fit specific business needs:

1. Workflow Customization: Tailor verification steps and automate processes.

2. Integration: Seamlessly integrates with CRMs, ERPs, and custom systems via APIs.

3. Branding: Custom UI with logos, colors, and design to align with your brand.

4. Compliance: Configurable for GDPR, CCPA, HIPAA, or region-specific regulations.

5. Authentication: Offers options like biometrics, document scans, and multi-factor authentication.

6. Scalability: Adjustable for user volume and performance needs.

7. Localization: Multi-language and regional support for global users.

8. Mobile Optimization: SDKs for integrating into mobile apps with device-specific optimizations.

OneSpan Identity Verification offers comprehensive training and support for new users:

• Training:

  • Onboarding Programs: Detailed training during the initial setup phase.

  • Workshops and Webinars: Live and recorded sessions to help users understand platform features.

  • Documentation: User manuals, setup guides, and API references for technical users.

• Support:

  • 24/7 Technical Support: Available via phone, email, or online ticketing system.

  • Dedicated Account Managers: Personalized assistance for enterprise customers.

  • Knowledge Base: Self-service resources, including FAQs, articles, and troubleshooting tips.

• Additional Services:

  • Custom training for specific business use cases.

  • Implementation and consulting services to optimize usage.

OneSpan Identity Verification implements robust security measures to protect data:

• Encryption:

  • End-to-end encryption of data in transit and at rest.

  • Use of advanced cryptographic protocols (e.g., AES-256) for secure communications.

• Data Privacy:

  • Compliance with GDPR, CCPA, and other privacy regulations.

  • Data anonymization and limited retention policies to minimize exposure.

• Authentication:

  • Multi-factor authentication (MFA) for access control.

  • Biometric and document-based verification methods to prevent fraud.

• Infrastructure Security:

  • Regular security audits and penetration testing.

  • Hosted on secure, ISO-certified cloud infrastructure.

• Access Control:

  • Role-based access permissions to restrict unauthorized access.

  • Detailed activity logs for monitoring and auditing.

• Fraud Detection:

  • AI-powered tools to detect suspicious patterns and mitigate risks.

  • Real-time verification to ensure identity authenticity.

OneSpan Identity Verification releases updates regularly, with the following approach:

• Update Frequency:

  • Minor updates: Monthly or as needed for bug fixes and performance enhancements.

  • Major updates: Quarterly or biannually, introducing new features and improvements.

• Management:

  • Automatic Updates: For cloud-based deployments, updates are pushed automatically with minimal disruption.

  • Scheduled Rollouts: Updates are communicated in advance, allowing businesses to plan.

  • Release Notes: Detailed notes accompany each update, outlining changes, fixes, and new features.

  • Testing and Validation: Updates are rigorously tested to ensure stability and compatibility.

OneSpan Identity Verification policy on data ownership and portability includes the following key points:

• Data Ownership:

  • Customers retain full ownership of their data, including user information and verification records.

  • OneSpan acts as a data processor, handling data only for the purpose of providing services.

• Data Portability:

  • Supports exporting data in standard formats for easy migration or compliance purposes.

  • Provides APIs to facilitate seamless data transfer to other systems.

• Compliance:

  • Adheres to data privacy regulations like GDPR and CCPA, ensuring customer control over data access and portability.

• Retention and Deletion:

  • Offers configurable data retention policies based on customer requirements.

  • Ensures secure deletion of data upon contract termination or customer request.

The terms and conditions for contract renewal and cancellation for OneSpan Identity Verification typically include the following points:

Contract Renewal:

1. Automatic Renewal:

   • Contracts often renew automatically unless cancellation notice is provided.

   • Renewal terms e.g., duration and fees are specified in the agreement.

2. Notice Period:

   • A defined notice period e.g., 30-90 days is required before the contract's expiration for non-renewal.

   • Written notice may be mandatory for terminating auto-renewal.

3. Negotiation Option:

   • Clients can renegotiate terms, including pricing and service levels, before renewal.

4. Price Adjustments:

   • Renewals may include price revisions, typically communicated in advance.

Contract Cancellation:

1. Early Termination:

   • Permitted under specific conditions, such as non-performance or breach of contract by either party.

   • Early termination fees may apply if canceled before the agreed contract term.

2. Termination Notice:

   • Cancellation typically requires a written notice within a specified timeframe e.g., 30-60 days

3. Refunds and Fees:

   • Pro-rata refunds may be available for prepaid fees, depending on the agreement.

   • Setup or implementation fees are usually non-refundable.

4. Data Handling:

   • Customers are responsible for exporting their data before termination.

   • OneSpan ensures secure deletion of data post-termination as per its data retention policy.

5. Cause-based Termination:

   • Either party may terminate immediately in cases of regulatory non-compliance, breach of contract, or insolvency.

6. Transition Support:

   • Upon request, OneSpan may provide limited transition assistance to help migrate services during termination.

OneSpan Identity Verification software meets a variety of industry compliance standards to ensure data security and privacy. These include:

1. GDPR General Data Protection Regulation: Compliance with GDPR for handling personal data of EU residents, ensuring data privacy, security, and user rights.

2. CCPA California Consumer Privacy Act: Adheres to CCPA regulations for protecting the privacy and rights of California residents, including data access and deletion requests.

3. SOC 2 Type II: Complies with SOC 2 standards, ensuring security, availability, confidentiality, and privacy of customer data.

4. ISO 27001: Meets the global standard for information security management systems (ISMS), ensuring the protection of sensitive business information.

5. PCI DSS Payment Card Industry Data Security Standard: Adheres to PCI DSS for securely processing, storing, and transmitting credit card information.

6. HIPAA Health Insurance Portability and Accountability Act: Meets HIPAA standards for the protection of healthcare data, particularly in the healthcare sector.

7. eIDAS electronic IDentification, Authentication, and trust Services: Complies with EU regulations for electronic identification and trust services, essential for digital signatures and secure electronic transactions.

8. NIST National Institute of Standards and Technology: Follows NIST security frameworks for risk management and ensuring the integrity and security of identity verification processes.