[members-discuss] End user (natural person) ID check: sensitive documents stored to "idenfy.com" ?

Dear all, I, as LIR, have received requests from RIPE NCC, as they are running a project to verify all the resource holders registered with them, to check the ID of some of our end users (natural persons). We have been provided links to a third party organization which (I think) runs ID check on behalf of RIPE NCC.  The URL for those check is ivs.idenfy.com/<something>. The fact is that: - We do not have any information regarding how those sensitive documents are processed (and stored ?) - the URL is hosted bedhind an AWS URL, and this is not really an acceptable solution for RGPD. Could we please have more infos on this ? Thanks in advance Clément Cavadore