The CEO of Persona responded to this post, saying they wanted to clarify about the identity verification process. They said:
"The only subprocessors (8) used are: AWS, Confluent, DBT, ElasticSearch, GCP, MongoDB, Sigma Computing, and Snowflake
All biometric personal data is deleted immediately after processing.
All other personal data processed is automatically deleted within 30 days. Data is retained during this period to help users troubleshoot.
No personal data processed is used for AI/model training. Data is explicitly used to confirm your identity.
The subprocessors used do NOT include Anthropic, Groqcloud, or OpenAI. The referenced subprocessor list is the superset of subprocessors used across all customers which is unfortunately misleading - we are updating our documentation to make this clearer going forward (thank you for helping us realize this). Our customers select which products are used which determines which subprocessors are used."
BrianKrebs
npub1vc…0axsh
2026-02-21 14:04:45 UTC
in reply to nevent1q…uval
Author Public Key
npub1vc39pnjdqd77zzdxff4qyv8h3x0ey2mkx33c3vl8egr0a9ysxkxsk0axshSeen on
wss://relay.momostr.pinkPublished at
2026-02-21 14:04:45 UTCEvent JSON
{
"id": "e558d5d596451835b513d0dd4f4fee48544348d9b6a297c274f62c98c0f94aba",
"pubkey": "662250ce4d037de109a64a6a0230f7899f922b76346388b3e7ca06fe9490358d",
"created_at": 1771682685,
"kind": 1,
"tags": [
[
"p",
"662250ce4d037de109a64a6a0230f7899f922b76346388b3e7ca06fe9490358d"
],
[
"e",
"82b6a823d6484207ac7a2290ce2543e68fcddd2ba74e6540eb04899d76ac3415",
"",
"root",
"662250ce4d037de109a64a6a0230f7899f922b76346388b3e7ca06fe9490358d"
],
[
"proxy",
"https://infosec.exchange/@briankrebs/116108996488864099",
"web"
],
[
"proxy",
"https://infosec.exchange/users/briankrebs/statuses/116108996488864099",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/briankrebs/statuses/116108996488864099",
"pink.momostr"
],
[
"-"
]
],
"content": "The CEO of Persona responded to this post, saying they wanted to clarify about the identity verification process. They said: \n\n\"The only subprocessors (8) used are: AWS, Confluent, DBT, ElasticSearch, GCP, MongoDB, Sigma Computing, and Snowflake \n\nAll biometric personal data is deleted immediately after processing.\n\nAll other personal data processed is automatically deleted within 30 days. Data is retained during this period to help users troubleshoot.\n\nNo personal data processed is used for AI/model training. Data is explicitly used to confirm your identity. \n\nThe subprocessors used do NOT include Anthropic, Groqcloud, or OpenAI. The referenced subprocessor list is the superset of subprocessors used across all customers which is unfortunately misleading - we are updating our documentation to make this clearer going forward (thank you for helping us realize this). Our customers select which products are used which determines which subprocessors are used.\"",
"sig": "3b93983d3856453c82d3718f2839955d4a5ff309926bfa692ef90551509ef26623d0eec9d23417debbceab9ee356746ad78531f726103dc1f2d3156f94eb2152"
}