Trust & privacy
Privacy isn't a policy.
It's the architecture.
Attesta is built around the Jamaica Data Protection Act 2020, explicit consent, data minimisation, transient storage, and your right to see, move and delete your data.
Explicit, granular consent
You approve each use separately, verify, share outcomes, re-use across listings, and withdraw any with one tap.
Minimised by design
We read an income band, not your transactions. We keep verification outcomes, never the documents.
Erased on a clear clock
Most documents are deleted automatically once review is done, enforced by a disposal job, not a manual promise. For fraud prevention we keep a sealed copy of your identity records, with restricted access, for 12 months. Your selfie we keep on a lawful basis to help prevent fraud, then erase after a bounded period.
Your rights, self-service
Access, portability, rectification, erasure, objection, identity-checked and SLA-tracked, in-app.
Honest about location
We use trusted providers under written agreements and flag any transfers outside Jamaica; the current list is available from our Data Protection Officer on request.
A human, on appeal
Disagree with an automated result? Ask for a human review, your right to object to automated decisions.
Checked by people, shared as a signal.
Identity
A live selfie is matched to a government ID. The selfie is always a live capture, so a stolen photo of someone else cannot be submitted.
Income
We read the average monthly inflow into a band, never your individual transactions, and keep the band, not the statement.
Ownership & licence
Landlords prove title or rates for the property; realtors and property managers verify their Real Estate Board licence or firm registration.
Human review
A trained reviewer confirms each layer behind a locked door. You can ask a person to re-check any automated result.
The outcome
Counterparties see “Verified by Attesta” and an income band, never your ID, payslip or bank statement.
Monthly transparency report
We publish what we did, and what we missed.
Built from an append-only audit log: volumes verified, outcomes, turnaround, and reports actioned.
- Verifications completed and median turnaround
- Reports investigated and actioned
- Data requests answered within the 30-day window
The first report publishes when we open to the public.
Everything, in plain language and in full.