New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Comments
You should also disclose the logging done as per local law , for complete transparency
Providing SSD storage.
Please explain the bold letter words
For KYC verification we use withpersona portal currently. You will need to share your ID proof and selfie to avail the services. The documents will solely use for this verification only.
You mentioned "completely safe"
Please explain the basis of assertion and what is your guarantee in case of data theft, since you are asserting "completely safe"
You mentioned id proof and selfie
is it done due to strict local laws?
please be aware of local laws before getting the service in any region. Do not assume privacy laws are same
The government law in India for data centers is that you should have the KYC done at your end. If any fraud or malicious activity they find. They send us an official letter with IP Address and time. Only then we need to share identity of client. So for this reason we have to verify all our clients.
You should disclose logging done as per recently changed local laws and official letter can be a demand letter , may not necessarily based on any laws broken.
Both detailed KYC and detailed logging are required for data centers in the region.
Please correct me, if I am wrong
https://portswigger.net/daily-swig/indian-vpn-providers-resist-incoming-data-logging-law
Yes they don't tell us why they need information. But it will come from authentic email and a official letter head. We only provide information to Government body.
Can you please explain to me about logging done?
What information is logged every day as part of compliance?
And do you inform the customer, in case you happen to receive a demand letter
https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04.2022.pdf
yes we inform the customers, till now there was no such case in which gov told us not to share the info. But we can not commit to it. Because it will be based on gov stand in the letter.
It is not frequent that we receive a request from gov, it is very rare. I can say 1 out of 100 clients.
if letter mentions "do not inform the client"
You will follow the letter, even if the request in the letter is not as per the law
Thanks. I will discuss with our team on how we can increase the transparency.
Yes we are following the same
Personally I will prefer Singapore VPS with Indian IP address to avoid all the hassles that include selfie picture along with passport copy
If IP is from India, and company is registered in India , then all Indian law is applicable. Thats what we know from our Gov body.
The rules are not applicable if the physical server is not hosted in the geographically boundaries, as per my understanding.
This workaround is used by many VPN providers
https://www.expressvpn.com/vpn-server/india-vpn/indian-ip-address
Don't talk nonsense. They'll actually take your word for it?
It is illegal for unknown persons to check other people's documents. Even the Pentagon isn't safe, let alone your little private company.
We have purchased IP Address from IRINN and in there agreement it is clearly mentioned that any fraud activity from this IP Address will be our responsibility. IRINN also forward any complaint he receives directly to the to gov. If any hosting company is not following the indian gov practices, then they are in big risk.
I am not sure, you are in which country and what rules you follow. In India for buying simcard, vehicle, property etc also requires complete verification and this is also done by small companies.
And you are assuming that every indian ip address is owned by IRINN.
And check with your lawyers before using terms “follow gov practices”.
It is better to clearly state it as, "we follow law of the land".
Anyway, Vanakkam @Hostzop .
Pardon me. When you do this you PERSONALLY give the document in the hands of authorized persons and see them in person.
In your case you are sending a scan of your document to unknown unauthorized persons whom you don't even see or know. Maybe you are in collusion with fraudsters who will take a loan from the bank on your scan. And you will lose your apartment or something else. There are a lot of such cases In general, it would not to check YOUR passport before sending someone your own.
The only place I can get the Indian sim without Aadhar card number is at the international airport. Once out of the airport, the red tape circus starts.
No one will listen to your logic that non Indian citizens can not have Aadhar card number.
And that is why probably you asserted that it is “completely safe”
I have no idea why people are losing their shit. https://withpersona.com/ seems to be independent company that provides verification services with their own policies. https://withpersona.com/security
The company is just complying with the local laws. If you're not comfortable sharing your docs, then no need to buy the services. Hell Hetzner has you submit your documents directly to them with no middle verification service.
If you're not comfortable with it, this provider isn't for you. Same reason lots of folks don't go with hetzner.
I am not sure why everyone is arguing with the provider over this.
You can add a watermark to your document with the text "For Hostzop order verification only" before sending it to us. We care for our client. We are running our business from 2006. We had international clients from many locations. We are a registered company. As I mentioned in my post we can only provide service to client if he is fine for KYC verification.
well, Hetzner does id verification only from seleect customers, and I don't think they ask for passport copy along with selfie picture
@Hostzop is REQURED to collect passport copy along with selfie picture for EVERY customer and follow every govt demand letter without any counter question whether the demand is as per law or not.
Yeah so? It's on compliance with the local laws. It's not upto their whims and fancies.