[members-discuss] End user (natural person) ID check: sensitive documents stored to "idenfy.com" ?

Dear all,

I, as LIR, have received requests from RIPE NCC, as they are running a
project to verify all the resource holders registered with them, to
check the ID of some of our end users (natural persons). We have been
provided links to a third party organization which (I think) runs ID
check on behalf of RIPE NCC. 

The URL for those check is ivs.idenfy.com/<something>. 

The fact is that:
- We do not have any information regarding how those sensitive
documents are processed (and stored ?)
- the URL is hosted bedhind an AWS URL, and this is not really an
acceptable solution for RGPD.

Could we please have more infos on this ?

Thanks in advance

Clément Cavadore