Security and privacy are not a feature. They’re our identity.

We take the responsibility of helping you manage your customer data seriously. That’s why we’ve taken a security and privacy first approach to everything we do.

CCPAGDPRAICPA SOC 2ISO 27001KantaraPCIHIPAAFERPAAge CheckKJMiBeta

Security and privacy at our core

Trust is built on security and privacy. That’s why Persona adheres to the highest industry standards, maintaining compliance and certifications to safeguard you and your customers.

Certifications and compliance
Our security and privacy frameworks are based on and aligned with global standards that ensure the highest grade of security is met and exceeded. Please reach out to your Persona account manager or support@withpersona.com for a copy of our certifications.

Security

With multilayered security mechanisms, our in-depth strategy protects against a wide range of threats.

Privacy

Every decision we make begins with the safety and privacy of you and your customers' data in mind.

Data transfer practices
We perform transfers in a secure manner by encrypting data in transit. We are also able to support data residency in the US and the EU.
Privacy policy
Our Privacy Policy honors the CCPA/CPRA and GDPR frameworks. We are transparent about how we collect and use your data.
Privacy by design
Your data is yours to own. We never sell user data and provide you with secure methods to delete it in accordance with privacy regulations.
Privacy impact assessments
We continuously evaluate the impact of our activities on data privacy to ensure that we collect the minimum data needed and improve our practices.

Persona for Government

The Persona platform is a cloud-native comprehensive identity verification platform tool hosted on Google Cloud Platform (GCP) that's designed to help federal agencies verify their users' identities. The core capabilities of the Persona Platform are as follows:

View on FedRAMP Marketplace
Identity verification
Persona offers multiple verification methods, including government ID verification (supporting over 200 countries and territories), selfie verification with biometric liveness detection, database verification, and NFC verification.
Fraud prevention
The platform employs device signals, passive signals (IP address, geolocation, device fingerprinting), and advanced algorithms to detect fraud attempts like deepfakes and spoofing.
Compliance solutions
Persona helps agencies meet global compliance requirements, including KYC (Know Your Customer), KYB (Know Your Business), and AML (Anti-Money Laundering).
Customizable Workflows
Agencies can create tailored verification journeys with drag-and-drop tools and custom rules.

FedRAMP PMO and agencies can request access to our non-public FedRAMP materials by emailing fedramp@withpersona.com

“As we deal with sensitive health records, we needed a certified identity solution that would help us verify patients quickly, accurately, and safely. Not only did Persona meet all of these expectations, but their NIST IAL certification will also play a key role in our ability to help patients get more out of their health records.”
Deven McGraw
Lead for Data Stewardship and Data Sharing at Citizen Health