The same-person check at handover
How to confirm the person collecting the car is the hirer who verified, and how the 48-hour selfie window works.
The ID check tells you the hirer who completed the link is a real person who matched their own document. It does not, on its own, tell you that the person standing on your forecourt is that hirer. Confirming that is the same-person check, and it happens at handover, done by you.
The check that always works
Ask the person collecting for their photo ID or driving licence and match it to the name on the booking. This works on every hire, on every tier, and it does not depend on any setting: the booking record shows you the name the hirer checked in under, and the Identity section of the hire shows the name and date of birth Stripe verified against the document, so you have two things to match the physical licence to.
Do it before the keys move, together with the handover condition photos. The portal reminds you of both at the Mark handed over step.
The verified selfie view
The identity check includes a selfie, matched to the ID document by Stripe Identity. Where the view is switched on, the hire's Identity section gives you a one-tap view of that verified selfie, as a face to compare against the person in front of you at handover. The image is fetched from Stripe for that view and KeyProof stores nothing: not the selfie, and never the ID document images. Each view is recorded on the hire's timeline.
The view is one switch for the whole of KeyProof, not something you turn on in your own settings, and it stays switched off until the data protection impact assessment covering it is co-signed by both founders inside KeyProof. When it is on, one limit still applies: it works only where the hirer's own recorded consent covered showing the selfie at handover, so a hirer who verified before that consent wording existed cannot be shown. In either case the hire says so in plain words rather than leaving you with an empty box, the photo ID check above is the instruction for that hire, and the ID check itself and its result are unaffected.
The 48-hour window
Stripe releases a verified selfie for 48 hours after the check completes. That is Stripe's rule, not KeyProof's, and it cannot be extended from our side. After 48 hours the image is no longer available to fetch, so a hirer who checked in a week before pickup will have no viewable selfie at handover.
The selfie image is the only thing on the hire with a short window. The ID check result, the verified name and date of birth and the signed agreement all stand for the life of the record: it is only the selfie image that stops being available. When the window has passed, the hire says so at the handover step, with the date the check was done, so you know to check photo ID instead rather than wonder what broke.
If you want the selfie viewable at handover on a hire booked well ahead, the timing that matters is when the hirer completes their check-in: within 48 hours of pickup means the image is still available at the counter. The New hire screen flags this for you whenever the pickup date is far enough out for it to matter.
KeyProof never decides that two faces match. The selfie is a reference for you to look at, exactly like the physical licence, and whether to hand over the keys is always your decision.