Connected apps and consent

Every business you've shared with is listed in FOID, and you can take access back at any time.

See who has access

Two pages show this:

• Consent Requests — every business that asked for your data, with Pending, Approved or Revoked, what they can see, and when they asked.
• Verification Credentials — one credential per business you've shared with (Shared With), plus your FOID Master Credential. Test apps show (sandbox) after the name.

Use Search by platform or the All / Active / Expiring / Revoked tabs to filter.

Revoke access

1. Open Consent Requests or Verification Credentials.
2. Find the business and press Revoke.
3. Confirm: "Revoke <business>'s access? They will stop receiving any of your data."

What revoking does

Straight away:

• the business can't read your data any more — every request they make gets refused;
• any updates they hadn't received yet are cancelled, and they get no new ones about you;
• the row shows Revoked.

What they already received before you revoked stays with them (just like any document you handed over), and they may have their own legal duty to keep records. Revoking stops anything new.

To share with them again later, go through their Continue with FOID or verification flow again.