Band Identity Verification Store

Question

I am reading documentation about checking the band for managed accounts, and I wonder if it is worth storing them also (as a backup) in a private place where my application has access (for example, a personal bucket on S3 or on a private server)?

Answer 1

I would recommend against keeping any confidential information at your end, such as their SSN, a copy of your government ID or their bank details. The best solution here is to send the data directly to Stripe, since they will save it at their end and will not record any of them, except for the tracking that you provided them.

Then you listen to events account.updatedon the Connect html endpoint configuration on your platform. This will tell you if Stripe needs more information from this user, if installed, fields_neededand what a delay you should provide the necessary data based on verification[due_by].

, legal_entity[ssn_last_4_provided], , Stripe , .