{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-14", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "plaid-identity-verification", "name": "Plaid Identity Verification", "vendor": "Plaid Inc.", "vendorUrl": "https://plaid.com/products/identity-verification/", "kind": "http-api", "category": "identity-verification", "summary": "Plaid Identity Verification checks a person against data sources, identity documents, selfies with liveness and SMS, with risk scoring and optional Monitor watchlist screening. Sessions run in Plaid Link or through a backend-only API flow.", "url": "https://www.anchorterminal.com/tools/plaid-identity-verification", "markdownUrl": "https://www.anchorterminal.com/tools/plaid-identity-verification.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/plaid-identity-verification.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/plaid-identity-verification.json", "repo": "https://github.com/plaid/plaid-openapi", "license": "Proprietary service under Plaid's developer policy and end-user terms. The OpenAPI file and client libraries are MIT", "transports": [ "http" ], "packages": [ { "registry": "npm", "name": "plaid" }, { "registry": "pypi", "name": "plaid-python" } ], "auth": "api-key", "authNotes": "`client_id` and `secret` in the JSON body of each POST to https://sandbox.plaid.com or https://production.plaid.com, with a separate secret per environment. No scopes. Sandbox for Identity Verification is enabled self-serve from the Dashboard Products page (since 12 August 2026). Production needs a product access request, and the integrating company must be based in the US, Canada or the UK (checked 2026-10-14).", "pricing": "paid", "pricingNotes": "No public prices. Each session is billed an Anti-Fraud Engine fee plus fees for data source verification (by country), document checks and selfie checks, and retries are billed as new sessions. Exact rates appear after applying for Production. Sandbox is free (https://plaid.com/docs/account/billing/, checked 2026-10-14).", "priceSummary": "Paid", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the Identity Verification docs, the API reference or the pricing page (checked 2026-10-14).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 1238045, "pypiWeekly": 656200, "asOf": "2026-10-14" }, "docsUrl": "https://plaid.com/docs/identity-verification/", "llmsTxt": "https://plaid.com/llms.txt", "openapi": "https://raw.githubusercontent.com/plaid/plaid-openapi/master/2020-09-14.yml", "capabilities": [ "kyc.identity", "kyc.documents", "kyc.screening" ], "tags": [ "hosted", "api-key", "openapi", "llms-txt", "webhooks", "sandbox", "status-page", "python", "typescript", "go", "java", "ruby", "bug-bounty" ], "lastRelease": "2026-10-13", "graded": true, "anchor": { "graded": true, "score": 67.1, "grade": "B", "agentReady": false, "rank": 278, "ranked": true, "rankOf": 1076, "categoryRank": 5, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 75, "maintenance": 83, "payments": 15, "reliability": 68, "schema": 91, "security": 61, "transparency": 77 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 68, "points": 13.6, "reason": "Read with the hosted lines. status.plaid.com is a Statuspage with API Production and Sandbox components and per-bank components, and no component of its own for Identity Verification (20). Between 16 July and 14 October 2026 one incident names Identity Verification, the Python SDK (v33.0.0 and later) degraded when retrieving results on 1 August for 82 minutes, marked minor. Plaid's own API had elevated errors on 24 August, also minor. The majors in that window are single banks and the Dashboard, which this product doesn't depend on (20). Rate limits are on plaid.com/docs/errors/rate-limit-exceeded, a path Plaid's robots.txt disallows, so we didn't read it. The plaid listing's 30 September check found limits published per endpoint, and whether Identity Verification endpoints are among them is unconfirmed (10 of 15). A 429 returns RATE_LIMIT_EXCEEDED with no Retry-After per the plaid listing, and `/identity_verification/create` takes `is_idempotent: true`, which returns the existing session instead of creating a second (8 of 15). No SLA found (0). The product is generally available, with the AAMVA check in beta (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 91, "points": 14.79, "reason": "Plaid's public OpenAPI file (plaid/plaid-openapi, version 2020-09-14_1.762.0) has the four `/identity_verification` operations and the `/watchlist_screening` operations for Monitor (25). llms.txt and a Markdown twin of each docs page (10). Field descriptions say how to use them, for example that the DOB check runs synchronously and shouldn't be polled, and the guides explain the backend-only flow and when to use documents as a fallback (16 of 20). Typed request and response objects with enums for status and check results (13 of 15). curl examples on every endpoint. The error pages sit under /docs/errors/, which robots.txt disallows, so we read error handling only from the reference (12 of 15). Dated API version and a changelog with Identity Verification entries (15)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 75, "points": 12.19, "reason": "Four endpoints. Responses are large, with every check's result in one object and no field selection (12 of 25). `/identity_verification/list` takes a cursor and filters by `client_user_id` and `template_id`, both required (15 of 20). Errors carry `error_type`, `error_code`, `request_id`, `display_message` and a documentation URL (20). Create takes `is_idempotent`, so a retry returns the existing session, and reads are safe to repeat. Retries are billed as new sessions (16 of 20). Official SDKs in several languages. Most checks need the end user in Plaid Link, while the backend-only flow runs data source checks with no UI (12 of 15)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 61, "points": 10.68, "reason": "`client_id` and `secret` in the JSON body, separate secrets per environment, rotatable from the Dashboard. No scopes on the secret (20 of 30). One secret reaches every Plaid product the team has, with no read-only key. Redaction of personal data runs on a custom schedule set by Plaid support, not by API (8 of 20). Responses carry user-entered and document data, with no injection guidance (5 of 15). Dashboard request logs for 14 days and Dashboard audit logs since August 2025 (13 of 15). security.txt valid until 31 December 2026 with a HackerOne programme. No SOC 2 or ISO 27001 statement on the pages read (15 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 15, "points": 1.88, "reason": "No x402, MPP or L402 (0). The pricing page lists Identity Verification under Pay as you go, Growth and Custom with no prices, and the docs say exact pricing appears after applying for Production. The fee model (a base Anti-Fraud Engine fee plus data source, document and selfie fees) has no numbers (0). Sandbox access for Identity Verification became self-serve on 12 August 2026 from the Dashboard Products page, with no card per the plaid listing (15 of 20). A person signs up in a browser, and Production needs a product access request (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 83, "points": 7.26, "reason": "The changelog's latest Identity Verification entry is 13 October 2026 (SSA match result in `kyc_check`) (30). Six Identity Verification entries since 9 July, on 9 July, 17 July, 12 August, 3 September, 24 September and 13 October (20). A closed service with a dated changelog and Dashboard support (12 of 15). plaid-node 48.0.0 on 6 October 2026, regenerated from the OpenAPI file (15). plaid-node has no test workflow in its repository per the plaid listing (6 of 10)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 77, "points": 6.74, "note": "editorial 57, provenance 97", "reason": "Closed service under Plaid's published developer policy and end-user terms. SDKs are MIT (15 of 30). The docs say Identity Verification keeps session data while the contract is active, allows a rolling redaction period on request and ends Dashboard and API access when the contract ends, so data must be exported first. No retention period is stated by default (18 of 30). Dated deprecations in the changelog (16 of 20). Data from the UK and EEA goes to the US per the plaid listing. No named sub-processor list found (8 of 20)." } ], "assessment": { "date": "2026-10-14", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Four endpoints. Responses are large, with every check's result in one object and no field selection (12 of 25). `/identity_verification/list` takes a cursor and filters by `client_user_id` and `template_id`, both required (15 of 20). Errors carry `error_type`, `error_code`, `request_id`, `display_message` and a documentation URL (20). Create takes `is_idempotent`, so a retry returns the existing session, and reads are safe to repeat. Retries are billed as new sessions (16 of 20). Official SDKs in several languages. Most checks need the end user in Plaid Link, while the backend-only flow runs data source checks with no UI (12 of 15).", "maintenance": "The changelog's latest Identity Verification entry is 13 October 2026 (SSA match result in `kyc_check`) (30). Six Identity Verification entries since 9 July, on 9 July, 17 July, 12 August, 3 September, 24 September and 13 October (20). A closed service with a dated changelog and Dashboard support (12 of 15). plaid-node 48.0.0 on 6 October 2026, regenerated from the OpenAPI file (15). plaid-node has no test workflow in its repository per the plaid listing (6 of 10).", "payments": "No x402, MPP or L402 (0). The pricing page lists Identity Verification under Pay as you go, Growth and Custom with no prices, and the docs say exact pricing appears after applying for Production. The fee model (a base Anti-Fraud Engine fee plus data source, document and selfie fees) has no numbers (0). Sandbox access for Identity Verification became self-serve on 12 August 2026 from the Dashboard Products page, with no card per the plaid listing (15 of 20). A person signs up in a browser, and Production needs a product access request (0).", "reliability": "Read with the hosted lines. status.plaid.com is a Statuspage with API Production and Sandbox components and per-bank components, and no component of its own for Identity Verification (20). Between 16 July and 14 October 2026 one incident names Identity Verification, the Python SDK (v33.0.0 and later) degraded when retrieving results on 1 August for 82 minutes, marked minor. Plaid's own API had elevated errors on 24 August, also minor. The majors in that window are single banks and the Dashboard, which this product doesn't depend on (20). Rate limits are on plaid.com/docs/errors/rate-limit-exceeded, a path Plaid's robots.txt disallows, so we didn't read it. The plaid listing's 30 September check found limits published per endpoint, and whether Identity Verification endpoints are among them is unconfirmed (10 of 15). A 429 returns RATE_LIMIT_EXCEEDED with no Retry-After per the plaid listing, and `/identity_verification/create` takes `is_idempotent: true`, which returns the existing session instead of creating a second (8 of 15). No SLA found (0). The product is generally available, with the AAMVA check in beta (10).", "schema": "Plaid's public OpenAPI file (plaid/plaid-openapi, version 2020-09-14_1.762.0) has the four `/identity_verification` operations and the `/watchlist_screening` operations for Monitor (25). llms.txt and a Markdown twin of each docs page (10). Field descriptions say how to use them, for example that the DOB check runs synchronously and shouldn't be polled, and the guides explain the backend-only flow and when to use documents as a fallback (16 of 20). Typed request and response objects with enums for status and check results (13 of 15). curl examples on every endpoint. The error pages sit under /docs/errors/, which robots.txt disallows, so we read error handling only from the reference (12 of 15). Dated API version and a changelog with Identity Verification entries (15).", "security": "`client_id` and `secret` in the JSON body, separate secrets per environment, rotatable from the Dashboard. No scopes on the secret (20 of 30). One secret reaches every Plaid product the team has, with no read-only key. Redaction of personal data runs on a custom schedule set by Plaid support, not by API (8 of 20). Responses carry user-entered and document data, with no injection guidance (5 of 15). Dashboard request logs for 14 days and Dashboard audit logs since August 2025 (13 of 15). security.txt valid until 31 December 2026 with a HackerOne programme. No SOC 2 or ISO 27001 statement on the pages read (15 of 20).", "transparency": "Closed service under Plaid's published developer policy and end-user terms. SDKs are MIT (15 of 30). The docs say Identity Verification keeps session data while the contract is active, allows a rolling redaction period on request and ends Dashboard and API access when the contract ends, so data must be exported first. No retention period is stated by default (18 of 30). Dated deprecations in the changelog (16 of 20). Data from the UK and EEA goes to the US per the plaid listing. No named sub-processor list found (8 of 20)." }, "sources": [ { "what": "Identity Verification introduction, retention and pricing model", "url": "https://plaid.com/docs/identity-verification/index.html.md", "seen": "2026-10-14" }, { "what": "Identity Verification API reference", "url": "https://plaid.com/docs/api/products/identity-verification/index.html.md", "seen": "2026-10-14" }, { "what": "testing in Sandbox", "url": "https://plaid.com/docs/identity-verification/testing/index.html.md", "seen": "2026-10-14" }, { "what": "webhooks", "url": "https://plaid.com/docs/identity-verification/webhooks/index.html.md", "seen": "2026-10-14" }, { "what": "Monitor introduction", "url": "https://plaid.com/docs/monitor/index.html.md", "seen": "2026-10-14" }, { "what": "billing and fee models", "url": "https://plaid.com/docs/account/billing/index.html.md", "seen": "2026-10-14" }, { "what": "changelog", "url": "https://plaid.com/docs/changelog/index.html.md", "seen": "2026-10-14" }, { "what": "Dashboard MCP server", "url": "https://plaid.com/docs/resources/mcp/index.html.md", "seen": "2026-10-14" }, { "what": "docs index for agents", "url": "https://plaid.com/llms.txt", "seen": "2026-10-14" }, { "what": "robots.txt", "url": "https://plaid.com/robots.txt", "seen": "2026-10-14" }, { "what": "pricing page", "url": "https://plaid.com/pricing/", "seen": "2026-10-14" }, { "what": "OpenAPI file", "url": "https://raw.githubusercontent.com/plaid/plaid-openapi/master/2020-09-14.yml", "seen": "2026-10-14" }, { "what": "status incidents (JSON)", "url": "https://status.plaid.com/api/v2/incidents.json", "seen": "2026-10-14" }, { "what": "security.txt", "url": "https://plaid.com/.well-known/security.txt", "seen": "2026-10-14" }, { "what": "npm plaid", "url": "https://registry.npmjs.org/plaid", "seen": "2026-10-14" } ], "openQuestions": [ "unchecked: plaid.com/docs/errors/rate-limit-exceeded and the other /docs/errors/ pages, which robots.txt disallows for all crawlers. Rate limits and error codes for Identity Verification endpoints come from the plaid listing's 30 September check and the API reference only. Under the brief this may mean the listing should be held", "Whether the Sandbox sign-up asks for a card. Per the plaid listing it doesn't", "Watchlist screening runs through Monitor, sold as a separate product. Capability kyc.screening is listed because an Identity Verification template can include a Monitor screening step", "Plaid's Dashboard MCP server covers Production diagnostics and analytics. No Identity Verification tools were confirmed and we didn't call it" ] }, "negative": 0, "verdict": "Plaid Identity Verification has four typed endpoints in Plaid's public OpenAPI file, an idempotent create, a backend-only flow for data source checks and frequent changelog entries. Prices appear only after applying for Production, the secret has no scopes, and the rate-limit and error pages are disallowed to crawlers.", "bestFor": "US, Canadian and UK companies that want KYC with data source checks, documents and selfies, especially those already on Plaid or wanting Monitor screening in the same flow.", "strengths": [ "Four typed endpoints in the public OpenAPI file, with llms.txt and Markdown docs", "Backend-only flow runs data source checks from user data with no Link session", "`is_idempotent` on create returns the existing session instead of making a second", "Six dated Identity Verification changelog entries between 9 July and 13 October 2026", "Self-serve Sandbox since 12 August 2026, with sample identities for test outcomes" ], "weaknesses": [ "No public prices. Rates appear only after a Production application", "One team secret reaches every Plaid product, with no scopes or read-only key", "Integrating companies must be based in the US, Canada or the UK", "Data stays only while the contract is active, and access to past sessions ends with it", "Rate-limit and error pages sit under a path robots.txt disallows, so we didn't read them" ], "agentNotes": [ "Pass `is_idempotent: true` to /identity_verification/create so a retry returns the existing session", "Use the backend-only flow (data source template, `gave_consent: true`) when you already hold the user's details. Documents and selfies need the person in Link", "Wait for the STATUS_UPDATED webhook or poll /identity_verification/get. Link's onSuccess doesn't mean the user passed", "Don't issue retries casually. Each retry is a new session billed again", "Enable Sandbox for Identity Verification on the Dashboard Products page before the first call" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 67.1 } ], "editorialScores": { "ergonomics": 75, "maintenance": 83, "payments": 15, "reliability": 68, "schema": 91, "security": 61, "transparency": 57 }, "provenanceScore": 97 }, "connect": { "http": "curl -X POST https://sandbox.plaid.com/identity_verification/create \\\n-H 'Content-Type: application/json' \\\n-d '{\n \"client_user_id\": \"user-sandbox-b0e2c4ee-a763-4df5-bfe9-46a46bce993d\",\n \"client_id\": \"${PLAID_CLIENT_ID}\",\n \"secret\": \"${PLAID_SECRET}\",\n \"is_shareable\": true,\n \"template_id\": \"idvtmp_52xR9LKo77r1Np\",\n \"gave_consent\": true\n}'" }, "letme": { "capability": "https://letme.dev/kyc.identity", "tool": "https://letme.dev/plaid-identity-verification" }, "sameCompany": [ "plaid" ], "notable": [ "Separate from Plaid's bank data products, listed as plaid. Identity Verification has its own endpoints, templates and fee model (https://plaid.com/docs/identity-verification/)", "A backend-only flow runs data source checks with user data and consent and no Link session (https://plaid.com/docs/identity-verification/)", "`is_idempotent: true` on /identity_verification/create returns an existing session for the same user and template (https://plaid.com/docs/api/products/identity-verification/)", "Self-serve Sandbox access for Identity Verification was added on 12 August 2026 (https://plaid.com/docs/changelog/)", "Session data is kept while the contract is active, and access to past sessions ends with the contract (https://plaid.com/docs/identity-verification/)", "Plaid's robots.txt disallows /errors/*, which holds the rate-limit and error pages (https://plaid.com/robots.txt)" ], "area": "domain-data", "details": [ { "label": "Surface graded", "value": "Identity Verification endpoints of the Plaid API. Plaid's bank data products are listed as plaid" }, { "label": "Endpoints", "value": "/identity_verification/create, /get, /list and /retry, plus /identity_verification/autofill/create. Monitor screening under /watchlist_screening/individual and /entity" }, { "label": "Checks", "value": "SMS, data source verification (name, address, date of birth, phone, ID number), document check with optional AAMVA (beta, US), selfie with liveness and age estimation, risk check, Trust Index score (US), AML screening through Monitor" }, { "label": "Flows", "value": "Plaid Link (web and mobile SDKs), Plaid-hosted verification links, backend-only data source flow" }, { "label": "Credentials", "value": "`client_id` and `secret` per environment in the request body. No scopes" }, { "label": "Retries", "value": "`is_idempotent` on create. /identity_verification/retry makes a new session id, billed again" }, { "label": "Webhooks", "value": "STATUS_UPDATED, STEP_UPDATED and RETRIED" }, { "label": "Retention", "value": "Kept while the contract is active. A rolling redaction period is set on request through support" }, { "label": "Eligibility", "value": "Integrating company based in the US, Canada or the UK. End users in nearly 190 countries" }, { "label": "Sandbox", "value": "Enabled self-serve from the Dashboard, with sample identities and reserved test names" }, { "label": "Status", "value": "status.plaid.com on Statuspage, API Production and Sandbox components, no separate Identity Verification component" } ], "provenance": { "legalEntity": "Plaid Inc.", "domain": "plaid.com", "domainRegistered": "1995-08-16", "endpointOnVendorDomain": true, "terms": "https://plaid.com/legal/#developer-policy", "privacy": "https://plaid.com/legal/#privacy-statement", "statusPage": "https://status.plaid.com", "changelog": "https://plaid.com/docs/changelog/", "securityTxt": "valid", "checked": "2026-10-14", "notes": [ "Same entity, legal pages and status page as the plaid listing. Plaid Financial Ltd and Plaid, B.V. cover the UK and the EEA.", "plaid.com/.well-known/security.txt lists HackerOne and security@plaid.com and expires 2026-12-31.", "plaid.com was registered in 1995, before Plaid was founded." ], "score": 97, "checks": [ { "check": "Legal entity named", "value": "Plaid Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "plaid.com, registered 1995-08-16 (31 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "plaid.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 6 of the 7 things a reader expects, and has 1 clause that costs points", "points": 7.1, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "status.plaid.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "valid", "points": 10, "max": 10, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "https://plaid.com/legal/#developer-policy", "state": "read", "readAt": "2026-10-08", "statedDate": "2025-12-01", "words": 142452, "points": 7.1, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Updated: December 2025", "says": "Last updated 2025-12-01" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "This Agreement and any dispute or claim (including non-contractual disputes or claims) arising out of or in connection with it or its subject matter or formation shall be exclusively governed by and construed in accordance with the laws of the Netherlands.", "says": "The law of Netherlands" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "In the event of an unauthorized Transaction, we will refund the amount to you within one Business Day following notification, with your maximum liability limited to €50.", "says": "Capped at €50" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "At any time in its discretion, Plaid may terminate or suspend this Agreement (or your use of the Platform) with or without notice and for any or no reason, including if Plaid suspects that you have violated this Agreement." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "We will also notify developers of any material changes in accordance with our developer agreements, as they may be better positioned to notify you about changes to this Policy.", "says": "Says it gives notice of a change" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "Regardless of where you live, we will honor the following rights related to your personal data, subject to some limitations and exceptions provided by law, and you will not be discriminated against for exercising them:" }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "terms.benchmark", "label": "Restricts benchmarking or competitive use", "found": true, "quote": "…any of Plaid’s proprietary notices, (e) access the Platform for competitive purposes or publish any benchmark or performance information about the Platform, or (f) use the Platform in any manner that could damage, disable, overburden, or impair the functioning of the Platform or interfere with, disrupt or negatively a…", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "We can terminate your Account at any time if we give you two months' notice and transfer any Available Balance at the time to your nominated bank account without a charge." } ] }, { "kind": "privacy", "url": "https://plaid.com/legal/#privacy-statement", "state": "read", "readAt": "2026-10-08", "statedDate": "2025-12-01", "words": 142452, "points": 10, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Updated: December 2025", "says": "Last updated 2025-12-01" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "For information about how Plaid processes data we collect through our websites or when you interact with Plaid outside of using our products or services, such as when you email Plaid directly, please see our All Audience Privacy Statement and Cookie Policy." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "Your data will be stored no longer than three years, unless otherwise required by law.", "says": "Names a period of three years" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "Data from other sources, including service providers and identity verification and fraud prevention services." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "Please note that while we do not sell your personal information we may share it with third parties for advertising purposes using “cookies,” as described in our cookie policy.", "says": "Says it does not sell personal data" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "To the extent we rely on consent to collect and process your data, you have the right to withdraw your consent at any time per the instructions provided in this Policy." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "Please don’t hesitate to contact us at legalnotices@plaid.com if you have questions.", "says": "legalnotices@plaid.com" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "Google has certified with the EU-US Data Privacy Framework;", "says": "Relies on the Data Privacy Framework" } ], "toKnow": [ { "key": "privacy.sells", "label": "Says it sells personal data or shares it for advertising", "found": true, "quote": "Please note that while we do not sell your personal information we may share it with third parties for advertising purposes using “cookies,” as described in our cookie policy." } ], "notes": [ { "date": "2026-10-08", "text": "Personal information given to Plaid's chatbot may be shared with the third-party company that powers the chatbot.", "quote": "Plaid uses chatbots that are powered by third-party service providers, please be aware that if you provide personal information to our chatbot, your information may be shared with the third-party service provider for the purposes of powering the chatbot." }, { "date": "2026-10-08", "text": "Plaid says it collects, uses and shares aggregated and de-identified information for any purpose the law permits.", "quote": "We also collect, use, and share information that has been aggregated and de-identified in a way so it cannot be used to identify you, for any purpose permitted under applicable law." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/plaid-identity-verification.json", "live": { "slug": "plaid-identity-verification", "vendorStatus": { "page": "https://status.plaid.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-14T09:39:36.297248466Z" }, "updatedAt": "2026-10-14T09:39:36.297248466Z" } } }