Security and privacy are not a feature. They’re our identity.

We take the responsibility of helping you manage your customer data seriously. That’s why we’ve taken a security and privacy first approach to everything we do.

Security and privacy at our core

Trust is built on security and privacy. That’s why Persona adheres to the highest industry standards, maintaining compliance and certifications to safeguard you and your customers.

Certifications and compliance

Our security and privacy frameworks are based on and aligned with global standards that ensure the highest grade of security is met and exceeded. Please reach out to your Persona account manager or [email protected] for a copy of our certifications.

Security

With multilayered security mechanisms, our in-depth strategy protects against a wide range of threats.

Privacy

Every decision we make begins with the safety and privacy of you and your customers' data in mind.

Data transfer practices

We perform transfers in a secure manner by encrypting data in transit. We are also able to support data residency in the US and the EU.

Our Privacy Policy honors the CCPA/CPRA and GDPR frameworks. We are transparent about how we collect and use your data.

Privacy by design

Your data is yours to own. We never sell user data and provide you with secure methods to delete it in accordance with privacy regulations.

Privacy impact assessments

We continuously evaluate the impact of our activities on data privacy to ensure that we collect the minimum data needed and improve our practices.

Persona for Public Sector

The Persona platform is a cloud-native comprehensive identity verification platform tool hosted on Google Cloud Platform (GCP) that's designed to help federal agencies verify their users' identities. The core capabilities of the Persona Platform are as follows:

View on FedRAMP Marketplace

Identity verification

Persona offers multiple verification methods, including government ID verification (supporting over 200 countries and territories), selfie verification with biometric liveness detection, database verification, and NFC verification.

Fraud prevention

The platform employs device signals, passive signals (IP address, geolocation, device fingerprinting), and advanced algorithms to detect fraud attempts like deepfakes and spoofing.

Compliance solutions

Persona helps agencies meet global compliance requirements, including KYC (Know Your Customer), KYB (Know Your Business), and AML (Anti-Money Laundering).

Customizable Workflows

Agencies can create tailored verification journeys with drag-and-drop tools and custom rules.

FedRAMP PMO and agencies can request access to our non-public FedRAMP materials by emailing [email protected]

“As we deal with sensitive health records, we needed a certified identity solution that would help us verify patients quickly, accurately, and safely. Not only did Persona meet all of these expectations, but their NIST IAL certification will also play a key role in our ability to help patients get more out of their health records.”

Deven McGraw

Lead for Data Stewardship and Data Sharing at Citizen Health