In the Netherlands, organisations are only allowed to ask for a full, unobscured ID when their situation is specifically permitted by law. Otherwise, either the user or organisation has to block out the BSN and passport photo. Does the process abide by these rules by blocking out said information before further processing or allowing the user to upload an image processed by KopieID? Or is there some sort of exception, making it that these rules don't apply for this use case? I'm looking forward to getting access to this feature, but don't want to run into issues because non-compliance causes stuff to be blocked or whatever.

(See: https://www.autoriteitpersoonsgegevens.nl/en/themes/identification/passport-and-identity-card/copy-of-your-id-what-can-you-do#copy-id-without-statutory-obligation)

Watermarking is also recommended to minimise risk, unless a clean copy is required by law, but this is not mandatory, so that does not worry me that much.