Data Retention

The license_id (for the Interac Verification Service) or job_id (for Interac Document Verification Service) is provided as additional claims in the UserInfo response and must be retained by the partner and associated with the user’s transaction.

📘

Data Retention Period

The license_id or job_id which is linked to the transaction/member has to be retained by the RP/DAC for 7 years.

This is required should the partner need to initiate a transaction investigation or in the case that the partner is notified by Interac about an unauthorized transaction. Interac will provide the partner with the license_id or job_id for investigation.

In practical terms, the license/job IDs should be stored along with any non-PII transaction metadata which would support investigation activities should they arise such as date/timestamps, metadata on the purpose of the transaction, etc. The actual metadata to be stored with these license/job IDs varies from use case to use case and is therefore, not specifically defined in this guide.