FAQs

TrueVault offers Australia’s first reusable identity and credentialing system that is completely owned and controlled by individuals. Unlike traditional methods requiring repetitive document uploads, TrueVault streamlines secure identity verification, reducing risks of data theft and fraud by verifying biographic data at source and never storing an individuals identity documents after they have been adequately verified. Businesses benefit from simplified compliance and enhanced user experience, aligning with modern privacy expectations. 

TrueVault uses AES-256 end-to-end encryption, with unique individual keys for each user’s Personally Identifiable Information (PII). Multi-factor biometric authentication, including facial recognition and liveness detection, creates secure non-reversible templates. Original ID documents are never stored post-verification, eliminating data breach risks and ensuring compliance with privacy standards.

TrueVault stands out with its reusable Digital ID system, unlike one-off verification services or MyGovID, which has limitations like multiple account vulnerabilities. TrueVault’s “one face, one ID” approach, powered by granular selective data disclosure, lets users share only necessary data (e.g.proof of age) enhancing privacy and control. 

TrueVault aligns with the Australian Digital ID Act 2024, effective from 1 December 2024, and is pursuing accreditation for the Digital ID Trust Mark under the ACCC and OAIC regulations. Its biometric and eIDVT processes meet the Act’s stringent standards, ensuring compliance and trust. 

TrueVault leverages AI-driven document analysis, fraud detection and liveness checks to counter AI-generated fake IDs. Truevault uses globally best practice facial matching and tamper-detection technologies to ensure authenticity, protecting businesses and users from sophisticated fraud. 

Selective data disclosure allows users to share only specific data points (e.g., student status, working rights or phone number), instead of full ID documents being repetitively shared and stored by third parties. This minimises data exposure, reduces breach risks and gives users control over their digital identity, aligning with privacy-first principles. 

TrueVault supports businesses in meeting AML/CTF obligations under the AML/CTF Amendment Bill 2024 (Tranche 2) effective 1 July 2026. Its tailored rulesets like “AML/CTF Tranche 2 Primary Document" help firms with their KYC and ongoing client due diligence. 

TrueCredentials are cryptographically secure, revocable Verifiable Credentials issued for achievements like qualifications, personal cards or certificates. Stored in a user’s digital wallet, they follow W3C and OpenBadge 3.0 standards, ensuring portability and security across platforms. 

TrueVault is completely sovereign, where all data is processed and stored data in Australia using Amazon Web Services (AWS), ensuring compliance with local regulations. AWS’s robust, auto-scaling infrastructure and advanced encryption safeguard sensitive identity information. Furthermore, all TrueVault development and support teams are based in Australia. 

TrueVault maintains detailed audit logs for regulatory compliance, capturing verification details without storing original ID documents. Only a minimal, secure subset of data (e.g., name, address) is retained, reducing risk while ensuring audit integrity.