Questions, answered · Starting an immigration or relocation agency
How do I collect passports from candidates safely under GDPR?
Updated
Through a portal, not email. The candidate uploads once, the file is stored with access only for the people on the case, it is deleted on a set retention schedule, and every provider that stores it has signed a data processing agreement.
In detail
- No passports as email attachments.
- One copy in one place.
- Access per client and per role.
- A retention period and deletion on schedule.
- A data processing agreement with each provider.
How Settio helps
Settio's employee portal collects documents on the phone; Settio is hosted in Europe and publishes its DPA and subprocessors on the Trust page.
Start free trial
Read more
- Trust center (GDPR, DPA, subprocessors)
- Employee portal
- Starting an immigration agency: the software you need
Related questions
- What software do I need to start an immigration agency in Sweden?
- Which case management software suits a relocation and immigration agency in Sweden?
- Is there global mobility software an independent agency can use without competing with the vendor?
- What if the country I work with isn't supported by Settio?
- Can I run an immigration agency on a spreadsheet?
- Is there a client portal for candidates going through a work permit?
Informational only. This guide is not legal advice. Always verify requirements with official government sources before acting. Facts checked 10 October 2026. About this information