Identity verification
Why we ask you to verify your identity, how to do it, and which actions wait for it.
Identity verification lives in Settings › Identity verification (/settings/identity). You do it once, as a person, and it applies in every company you work for.
Why
An invoice, an SPV filing or a payment leaves in the company's name. Verification confirms that the person sending it is real and identified, and protects the company from someone pretending to be you.
What you can do without it
Everything except actions with a fiscal or external effect: explore the app, create drafts, import data, configure settings.
What needs it
| Action | Where |
|---|---|
| Issuing and sending an invoice | Invoices |
| Submitting to e-Factura | e-Factura |
| Inviting colleagues to the team | Settings › Team |
| Inviting a professional (accountant, lawyer) | Professionals |
| Creating an API key | Settings › API keys |
| Connecting a bank account | Bank |
| Initiating a payment | Bank › Payments |
| Sending a contract for signature | Contracts |
| Publishing the website | Site |
When you try one of these actions without verification, the "Verify your identity to continue" dialog opens with the options below; after verifying you come back exactly where you were. The requirement is switched on gradually, per organization; until then these actions work as before.
A temporary demo account (from "Try") can do none of these actions, whatever the settings.
Verification options
ID document + selfie (Stripe Identity)
You photograph your ID card or passport and take a selfie; it takes about 2 minutes and the result usually arrives in under 5 minutes. Face matching is biometric processing, so before you are sent to Stripe a separate screen explains what happens (facial template, Stripe as our processor, retention, withdrawal) and the option starts only after you tick the consent box, which is never pre-ticked. We record your consent with its version and time; you can withdraw it on the same page at any time. The verification is valid for 3 years.
ID document only, without a selfie (Stripe Identity)
On the same card you can choose to have only the document checked: Stripe confirms the ID is genuine and reads your name and date of birth, with no selfie and no face comparison, so no biometric data and no biometric consent. It counts as verification at the same level.
What we keep: the result, the method, the document's country and your birth year. What we do not keep: photos, document numbers or the CNP printed on the document. The images are deleted at Stripe after the decision.
If verification fails (expired document, unclear photo, selfie that does not match, age below the limit) you see the reason and can try again or choose another option.
Qualified digital certificate (ANAF)
No photos and no biometrics: you connect your qualified certificate to ANAF, as for e-Factura. A qualified certificate means its issuer has already identified you, so Brivio treats it as the highest verification level. The connection also proves your right to represent the company. Only a connection to the ANAF production environment counts, never the test one.
RoEID and the European identity wallet — coming soon
Signing in with the Romanian state's electronic identity (RoEID) or the European wallet will verify identity at eIDAS level "substantial" or above. These options appear on the page only once they are available.
Verification states
- Identity not verified — pick one of the options.
- Checking… — the Stripe session is being processed.
- Identity verified — with the level (ID + selfie, eIDAS substantial, qualified certificate) and the method.
If you hold several proofs, the strongest one counts. A Stripe session left unfinished for 30 days is cancelled automatically, so the button starts a fresh one.
Creating your account
One sign-up journey for individuals, companies, liberal professions, NGOs, accounting firms and invitations.
Account security and recovery
Sudo confirmation, signing out everywhere, the "Not me" button on a sign-in request, and how an administrator resets a member's two-factor authentication.