Data Protection
Last updated 12 August 2026
This page covers how we handle the sensitive documents and identity data an attestation file is built on, from passports, CNIC and NICOP copies to degrees, transcripts, and certificates. It sits alongside the privacy policy, which covers what we collect and how we use it, and the security page, which covers how the physical originals are protected in transit and in custody.
What We Protect
Passports, CNIC and NICOP copies, degrees, transcripts, school certificates, marriage and birth records, powers of attorney, and court papers. These are the documents that give a case its meaning, and they are handled as originals.
Who Handles Your Data
A named case coordinator owns your file. The team member who runs the HEC application or files at MOFA, IBCC, or the embassies sees only what the step needs. Beyond Attestdone, your data is shared only with the government authorities that process the documents, the courier that collects and returns them, and the payment processor that settles your order.
Physical Custody
Originals stay in a locked file cabinet or safe inside the processing office while they are with us, and every hand that touches the file is on record. Only the people handling your case can access them.
Digital Storage
Scans of your CNIC, passport, and documents are stored in access-controlled systems and permanently wiped from our active servers 30 days after your order is delivered.
Retention
Order records are kept for 2 years for audit purposes. If you want your data removed before then, email us and we delete it.
Who Sees What
Access is limited by role, with the case coordinator for your file, the authority runner for that file, and the compliance and content review function. No one else sees your documents.
Your Rights
You can ask to see what we hold, correct a mistake, or have the data deleted. Write to [email protected] with your order number, and we confirm what we hold, fix errors, or delete the data.
If Something Goes Wrong
We follow the incident response set out on our security page. If your data is affected, you are notified as soon as the facts are known.