Identity Verification -- Does Amazon store IDs indefinitely?

Generally when companies ask you submit an ID and/or selfie for verification purposes, they verify the information and then delete the ID scans/selfies. Often times they will state that they do this (or use a 3rd party service that states they do this). Amazon does not make it clear what happens to these document scans and video interviews that they receive from sellers.

Are they storing these documents indefinitely? If so, I’m kind of surprised there hasn’t been some major data breach yet. This would be a gold mine. Not only can a hacker get a ton of information like bank account information, but they can get a full front and back scan of their ID and possibly some other biometric information Amazon’s storing from the video verification.

There has long existed an abundance of admittedly-tangential evidence to suggest that Amazon does indeed maintain older records, in a wide variety of databases - evidence which typically appears in reports from sellers of this, that, or t’other long-stable data point of their SoA Account suddenly & inexplicably reverting, out of the blue on some sunny day, to long-disestablished information.


Relatively-minor data breaches - from both inside and out - have occurred time and again over the last several years - and even a cursory analysis of Amazon policy initiatives over the last dozen years or so will likely suggest, to even the fabled Most Casual Of Observers, that many a change - if not most - can probably be best attributed to Amazon’s efforts to combat the ever-increasing crescendo of them which its Global Expansion Initiative has wrought.

Still, the bottom line would appear to remain the same, in regards to why Amazon has thus far evaded the major data breaches which have so-plagued other business, government, and other entities of its scope (and smaller):

Amazon doesn’t mind scrimping on support infrastructure in many an area, but it cannot afford to do the same when ITS money’s on the line.

2 Likes

Yes, while they aren’t scrimping on protecting that data, neither are banks, and they’ve been the victim of some pretty massive hacks/breaches.