Designed to run on
verifiable information

Verified identity

• ID document and liveness check, with a specialist provider.
• Before verifying, explicit consent for biometric data is requested.
• From that check, POP only keeps the outcome: statuses, reasons, identifiers and document dates. No name, document number, photos, IP or location.

Privacy by design

• The passport isn’t public, doesn’t show up on Google and can’t be downloaded.
• Employers see “Lucía R.” until they pick her for an interview, and only open passports of candidates in their searches.
• CVs are read inside POP, without artificial intelligence: they never go to an outside service, and they’re deleted as soon as they’re read.
• Anyone can delete their account, with all their POP data and documents.

Against fraud

• Nobody can confirm their own experience, and the same email can’t confirm the same thing twice.
• Suspicious references don’t count until a person reviews them.
• The test is marked on the server and its questions aren’t public.
• Confirmed experience can’t be changed.

Protected data

• Daily backups, encrypted and kept in the European Union for 30 days.
• Restricted server access with personal accounts.
• Sessions expire after 15 days, and changing your password signs out the others.