Looks like they're using Yoti for identity verification, which just got fined $1 mil for biometric data protection violations.

https://www.biometricupdate.com/202603/spains-aepd-fines-yot...