Privacy Policy

1. Introduction

IdRamp, Inc. (“IdRamp,” “we,” “our,” or “us”) is an identity verification orchestration company. We provide a vendor-neutral platform that coordinates identity verification workflows across enterprise systems — including integrations with Microsoft Entra, Okta, Workday, ServiceNow, and a global network of identity verification providers — without processing, storing, or accessing personally identifiable information (PII) as part of those workflows.

This Privacy Policy describes how we collect and handle information through our public website at idramp.com (“Site”). It does not govern the operation of our identity orchestration platform, which by design does not retain or access end-user PII. If you are an enterprise customer with questions about platform-level data handling, please refer to your executed agreement with IdRamp or contact us directly.

2. Our Platform Does Not Process PII

IdRamp’s identity orchestration platform is architecturally designed to route verification workflows without retaining, storing, or accessing the personal data of end users being verified. Verified identity results are written directly into your enterprise identity directory (e.g., Microsoft Entra ID, Okta). IdRamp acts as the orchestration layer — not a data custodian.

This means:

• IdRamp does not store government-issued ID documents or biometric data
• IdRamp does not retain the personal data of individuals going through identity verification workflows
• Verified identity results belong to and remain within your enterprise directory
• Third-party identity verification providers in our network operate under their own privacy and data handling policies, which your organization should review

This section describes IdRamp’s platform architecture. Your organization’s enterprise agreement governs specific contractual data handling commitments.

3. Information We Collect Through This Website

When you interact with our public website, we may collect the following types of information:

3.1 Information You Provide Directly

When you contact us, request a demo, sign up for newsletters, register for events, or otherwise submit information through the Site, we may collect:

• Name and job title
• Company or organization name
• Work email address and phone number
• Work or business mailing address
• Information about your role or business function
• Messages or inquiries you submit through contact forms

Event registrations may be processed through a third-party service provider who shares that information back with us to fulfill your registration. Any such provider is required to treat your information in accordance with this Privacy Policy.

3.2 Information Collected Automatically

When you visit the Site, we and our service providers may automatically collect certain technical and usage information, including:

• IP address and general geographic location
• Internet service provider (ISP) name
• Browser type, version, and operating system
• Pages visited and time spent on each page
• Referring URL (the page that brought you to our Site)
• Date and time of your visit

This information is collected through cookies and standard web analytics tools (including Google Analytics) and is used to analyze site performance, understand user behavior, and improve the Site. See Section 7 (Cookies) for more detail.

4. How We Use Your Information

We use the information we collect through this Site to:

• Respond to your inquiries and provide customer support
• Send you product updates, newsletters, and marketing communications (where you have opted in)
• Process event registrations and deliver requested resources
• Improve the content, functionality, and performance of our Site
• Comply with applicable legal obligations
• Protect the security and integrity of our Site and services

We do not use website visitor data to train machine learning models or sell it to data brokers or advertisers.

5. How We Share Your Information

IdRamp does not sell your personal information. We may share information collected through this Site in the following limited circumstances:

5.1 Service Providers

We engage trusted third-party vendors to support our business operations, including website hosting, email delivery, marketing automation, event management, and analytics. These providers are permitted to use your information only as necessary to perform services on our behalf and are contractually required to protect its confidentiality.

5.2 Legal Requirements

We may disclose personal information when required by law or when we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation or valid legal process; (b) protect and defend the rights or property of IdRamp; or (c) protect the safety of our employees, users, or the public in urgent circumstances.

5.3 Business Transfers

If IdRamp is involved in a merger, acquisition, or sale of all or a portion of its assets, you will be notified via a prominent notice on our website or by direct communication of any change in ownership or material changes to how your information is used, along with any choices available to you.

6. Data Retention

We retain personal information collected through this Site for as long as your account is active, as needed to provide requested services, or as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

To request deletion of your information or to cancel any account or subscription, contact us at info@idramp.com. We will process your request in accordance with applicable law.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Site. There are two types of cookies we use:

Session Cookies

Session cookies expire when you close your browser. We use them to facilitate navigation and maintain your experience while you are on the Site.

Persistent Cookies

Persistent cookies remain on your device for a set period. We use them to recognize returning visitors, remember preferences, and serve relevant content. You can remove persistent cookies through your browser’s settings at any time.

We use Google Analytics to understand site traffic and user behavior. Google Analytics may set its own cookies. For information on how Google handles this data, see Google’s Privacy Policy. We do not control cookies set by third-party services embedded in the Site (such as YouTube or Vimeo video players); please review those providers’ privacy policies directly.

You may opt out of non-essential cookies at any time through our cookie settings, or by adjusting your browser preferences.

8. Security of Your Information

IdRamp uses reasonable and appropriate technical and organizational measures to protect personal information collected through this Site from unauthorized access, use, disclosure, or destruction. These measures include access controls, secure server environments, and encrypted transmission where applicable.

No method of transmission over the internet or electronic storage is completely secure. While we take data security seriously, we cannot guarantee absolute security and encourage you to take appropriate precautions when submitting information online.

9. Your Rights and Choices

Depending on your location, you may have certain rights with respect to your personal information, including the right to access, correct, or delete the information we hold about you. To exercise these rights or update your contact preferences, please reach out to us at:

Email: info@idramp.com

Mail: IdRamp, Inc., 306 S. Howard, Indianola, IA 50125

To unsubscribe from marketing communications, use the unsubscribe link in any email we send you, or contact us directly at the address above.

10. Third-Party Links and Services

Our Site may contain links to third-party websites or embed third-party services (such as video players). IdRamp is not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any site or service you visit through links on our Site.

11. Children’s Privacy

Our Site is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently received information from a minor, please contact us at info@idramp.com and we will promptly delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. For material changes, we will provide notice either by a prominent notice on our homepage or by direct communication before the changes take effect. Your continued use of the Site after any update constitutes your acceptance of the revised policy.

We encourage you to review this policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

IdRamp, Inc.

306 S. Howard, Indianola, IA 50125

Email: info@idramp.com

Website: www.idramp.com

We will use commercially reasonable efforts to respond promptly to any inquiry or complaint.