Thanks for the details, I think that sounds reasonable. Do you have access to the documents during the verification process, or are users redirected to the KYC provider to upload them? If you don't have access to the documents, what personal data does the KYC provider return to your company upon successful verification?
I'm curious because I haven't gone through an online KYC process before, and I'd like to understand the risks before claiming the airdrop.