How identity verification works
The four levels a program can require to show the person who trained is the person who signed, and what is kept.
Summary
Some training only counts if the right person completed it. A program can require a level of identity check before you start, and again when you attest. The higher the level, the stronger the proof. Each program says which level it needs: you are asked for it when you start the training and again when you sign the attestation. You can also do the checks your organization offers ahead of time under Account security.
Why it's needed
An attestation says "I, this person, completed this training". For most programs a signed-in account is enough proof. For regulated programs, an organization may need to show more, without QubicAcademy ever holding copies of anyone's ID.
Key terms
- Level: how strong a check a program asks for, from L0 to L3.
- Roster: the list of people and details your organization uploads.
- Step-up: checking again at the moment you attest.
How it works
| Level | What proves it is you | Typical use |
|---|---|---|
| L0 | You opened the invitation sent to your email | Awareness content |
| L1 | Your email address is verified: you set your password with an emailed code, used an emailed sign-in link, accepted an invitation, or signed in with your company's Google or Microsoft 365 account | Most compliance training, including New York harassment training |
| L2 | L1, plus your employee ID and one more detail (date of birth, or the last four digits of your phone number) matching your organization's roster | Shared or kiosk email, frontline staff |
| L3 | L1, plus a government ID and a selfie checked by Stripe Identity, with the name on the ID matching the roster (or your account) | Regulated programs and certifications |
What is kept: the level, the method, the result, the name that matched, the provider's reference, the time, your IP address and your browser's user agent. Images of your ID and your selfie are never stored by QubicAcademy; Stripe Identity holds them under its own terms.
Your organization's roster details are stored encrypted. Five wrong roster attempts in a day stop further tries until an administrator checks the details.
Role-based access
| Who | Can |
|---|---|
| You | Do the checks your organization offers, under Account security, and see your history |
| Org Admins and Assigners | Upload roster rows (employee ID, name, and a date of birth or phone digits) |
| Org Admins | Record a level as met for someone, with a written reason that is kept and audited |
How it connects
A failed check leaves the level unmet until you try again or an administrator reviews it. The checks are part of your training record; see Privacy and cookies and Signing in.
Tips
- For L3, have your ID to hand and use a device with a camera.
- Employee IDs are matched without regard to spaces or capital letters.
Troubleshooting
- "Confirm who you are before you start this training." The program needs a higher level than your account has. Do the check it names (under Account security), then start again.
- A program says it needs a level you cannot meet. Ask your organization's contact; an administrator can review it.
- The roster check says the details do not match. Check your employee ID and date of birth; after five tries, ask your administrator to check the roster.
- The name did not match. The name on your ID must match the name your organization has for you; ask your administrator to correct the roster.
- The ID check button is missing. Your organization or this installation does not offer ID checks.