1. Why we verify
Cehpoint acts for businesses on work that involves money, regulators and other people’s data. We introduce clients to lawyers and chartered accountants, we hold credit balances, and we prepare figures that end up in filings. Knowing who is on the other side of that is not a formality — it is what protects the people you deal with through us.
You can register, browse and use much of Cehpoint without verifying. Verification is required before we can act for you on anything that involves money, a regulator, or a third party’s data.
2. What we ask for
Identity details as they appear on your documents — legal name, entity type, date of birth or incorporation, address, and your PAN and GSTIN where they apply. Then at least one official document that identifies you or your business: a PAN card, passport, driving licence, voter ID, GST registration, certificate of incorporation, partnership deed or LLP agreement, Bar Council certificate or ICAI membership certificate.
We ask for the minimum that lets us be confident, not for everything you could send. If we need something more we will tell you exactly what, in your account, and you will see it as a list.
3. What the automated screening does — and does not do
When you upload a document, our software reads the text out of it and compares what it says with what you told us: the name, the number, the date, the address. It then reports one of three things — the document matches your details, it does not match, or it could not be read clearly.
This is a comparison, not an authentication. Our software cannot see a hologram, a watermark, a security thread, the paper, or signs that a scan has been altered. It cannot and does not tell us whether a document is genuine. Any product that claims otherwise from a photograph is overstating what is possible. Passing the screening means what you sent agrees with what you said — nothing more.
Every screening is recorded against your account, and you can read the result yourself, including anything it flagged.
4. Partially verified, and the call
If the screening passes, your account is marked partially verified. That status is deliberately honest: a machine has checked consistency, and a person has not yet checked anything.
Someone from our team will then contact you within seven days to confirm a few details directly. Only after that conversation does the full verified status appear on your account. If we cannot reach you, we will keep trying and tell you what we need; your partially verified status does not lapse while we are the ones waiting.
5. Aadhaar and other sensitive identifiers
We do not store Aadhaar numbers. If you send an Aadhaar document, or type an Aadhaar number into a form, our systems mask it automatically before anything is written to our database — we keep the last four digits only, so that we can talk to you about which document you sent. The full number is never stored, never logged, and never sent to any automated screening.
We ask you to mask the first eight digits yourself before uploading, as UIDAI recommends. Long card-like numbers are masked on the same basis. We do not ask for, and you should never send us, passwords, OTPs, card CVVs or net-banking credentials — no one at Cehpoint will ever ask you for them.
6. What we store, and for how long
We keep the text we read from a document, not the file you uploaded. The original image or PDF is processed and discarded; what remains is the words, with sensitive numbers already masked. That is a deliberate choice: it is enough to do the work, and it means a breach of our systems is not a leak of your identity documents.
Verification records are kept for as long as your account is open and for five years afterwards, which is the period Indian anti-money-laundering practice expects records of this kind to be retained. See our Data Retention & Deletion Policy for the detail.
7. If we cannot verify you
We may decline to verify an account, and we may decline to say more than that where saying more would defeat the purpose of the check. Where we can explain, we will. A declined verification does not by itself close your account, but it does limit what we can do for you.
If you think we have got it wrong, write to grievance@cehpoint.co.in; our Grievance Redressal Policy sets out how that is handled and by when.
8. Your rights
Under the Digital Personal Data Protection Act, 2023 you may ask us what verification data we hold about you, ask us to correct it, and ask us to erase it. Erasure requests are honoured except where we are required to retain a record — and where that applies, we will tell you which record and why.
Write to grievance@cehpoint.co.in for anything in this document, or to support@cehpoint.co.in for day-to-day help.