Verification: what is checked, and what is kept
Where a listing, a bid, a claim or a key needs a verified person or vehicle, the check runs through DigiLocker, the vehicle registry for a registration number, or the GST and company registries for a business.
With DigiLocker you sign in yourself. We receive a masked Aadhaar or the document you choose, never the Aadhaar number, and we keep the result of the check, its date and your consent rather than the document itself.
That is the whole design: prove it once against the source that issued it, keep the proof, throw the paper away. Verification is being switched on trade by trade, and the privacy page says plainly what each check asks for before it goes live.