Ondato
Ondato UAB, headquartered in LT. Website: ondato.com. Methods offered: facial age estimation (face scan), photo id, reusable digital id.
verified 18 October 2026
Retention, as published by Ondato
Scope not independently classified; check the source before applying this statement to a service.
“Yes. OnAge uses facial analysis and age estimation for accuracy, but it deletes biometric data instantly. Only the result — “old enough” or “not old enough” — remains.”
Quoted from ondato.com, dated 9 September 2026; checked 18 October 2026. Period as stated: instantly (OnAge).
Retention statements by service
Statements may cover different services, data types, dates or exceptions. Different periods are not necessarily contradictory. A statement for one service is not a default for another.
| Deployment | Method | What the deployment states | Provider statement and scope |
|---|---|---|---|
| OnlyFans adult | Photo ID Primary source |
No published retention period found (checked 18 October 2026). Notes: Ondato’s case study (published 18 May 2026, moved to a new address) says OnlyFans requires users to verify “their age and identity through a comprehensive onboarding process” and that Ondato adapted its infrastructure for that onboarding; it does not name the document or biometric steps and gives no retention period. |
Scope not independently classified; check the source before applying this statement to a service. “Yes. OnAge uses facial analysis and age estimation for accuracy, but it deletes biometric data instantly. Only the result — “old enough” or “not old enough” —…”Period as stated: instantly (OnAge) checked 18 October 2026 |
Reported customers
- OnlyFans 18 May 2026 ondato.com
https://ondato.com/customer-success-stories/onlyfans-case-study/
Certifications
- ACCS IEEE 2089.1-2024 Effective (to 11 Feb 2028) and Highly Effective (to 8 Apr 2028); ISO 27001, 27018 accscheme.com
The UK Age Check Certification Scheme (ACCS) registry lists certificates with their expiry dates; a certificate that has lapsed is recorded as such once the registry shows it.
Regulator actions and published incidents
No regulator action or published incident recorded as of 18 October 2026.
Questions people ask about Ondato
What does Ondato say it keeps?
Scope not independently classified; check the source before applying this statement to a service. "Yes. OnAge uses facial analysis and age estimation for accuracy, but it deletes biometric data instantly. Only the result — “old enough” or “not old enough” — remains." (ondato.com, dated 9 September 2026; checked 18 October 2026). Period as stated: instantly (OnAge). See each service’s own statement; scope, data type and exceptions may differ.
Is Ondato certified?
Recorded certifications: ACCS IEEE 2089.1-2024 Effective (to 11 Feb 2028) and Highly Effective (to 8 Apr 2028); ISO 27001, 27018. Each links to its source on the page; expiry dates are as stated there.
Has Ondato been fined or had a data incident?
No regulator action or published incident is recorded as of 18 October 2026. This site does not rate vendors; it records what regulators and the vendor have published.
Which UK services use Ondato?
Recorded deployments: OnlyFans.
Sources for this profile
- Ondato OnAge 9 September 2026
Changes to this profile
- — retention.quote, known_customers: OnAge page re-read 18 October 2026 (page modified 9 September 2026): quote made verbatim including Ondato’s own quotation marks. OnlyFans case study moved to /customer-success-stories/ (published 18 May 2026); link updated. ACCS registry entry re-read: two IEEE 2089.1 certificates, valid to 11 Feb and 8 Apr 2028. (was: deletes biometric data instantly. Only the result — old enough or not old enough — remains) manual
Correct this entry
Vendors are welcome to correct their profile. Point us at the policy page and the wording is replaced with the quotation, dated. Send a correction. Nothing you send is published.