Totatus Identity — Privacy policy

1. Scope

This policy applies to the Totatus Identity verification platform operated by Toutatis Limited, including the hosted end-user portal and API integrations.

It supplements the main Toutatis privacy policy for toutatis.eu when you use identity verification as a data controller or processor.

2. Data we process

Depending on your configuration we may process identity document images, biometric liveness signals, MRZ/OCR extracts, AML screening results, operator audit logs and signed verification reports.

3. Hosting & retention

Data is hosted in the European Union. Retention periods are defined per tenant configuration and contractual Data Processing Agreement.

4. Contact

Privacy requests: info@toutatis.eu

Questions about these documents? We are happy to clarify.