Company would be responsible for effectively verifying identity - similar to how this is done for websites.