Security and privacy are not a feature. They're our identity.
We take the responsibility of helping you manage your customer data seriously. That's why we've taken a security and privacy first approach to everything we do.
Adhering to the highest global standards of safety and compliance
AICPA SOC 2 Type II
Continuous security audits
ISO/IEC 27001
Information security standard
Kantara (NIST SP 800-63)
IAL2 Identity Assurance level
GDPR Compliant
EU general data protection regulation
CCPA Compliant
California consumer privacy rules
PCI DSS Level 1
Secure payment card operations
HIPAA Compliant
Protected health information safety
FERPA Compliant
Student record confidentiality
Age Check Certified
Age verification standard assurance
KJM Certified
Youth media protection validation
iBeta Level 1 & 2
Biometric liveness certified testing
Security and privacy at our core
Trust is built on security and privacy. That's why Identra adheres to the highest industry standards, maintaining compliance and certifications to safeguard you and your customers.
Certifications and compliance
Our security and privacy frameworks are based on and aligned with global standards that ensure the highest grade of security is met and exceeded. Please reach out to your Identra account manager or support@withidentra.com for a copy of our certifications.
Continuous validation across the identity landscape
Our defense-in-depth model spans physical security, server logic controls, database isolation, and algorithmic protection vectors.
Security
With multilayered security mechanisms, our in-depth strategy protects against a wide range of threats.
Availability
Our backup and replication program ensures data availability across primary and secondary systems. The Disaster Recovery program ensures that services remain available or are recoverable in case of disaster.
Secure development
We implement coding best practices focused on the OWASP Top Ten. Development, testing, and production environments are separated. All code changes are peer reviewed and tested prior to deployment into production.
Continuous vulnerability scanning
We maintain a comprehensive vulnerability management program which includes regular scanning, identification, and remediation of security vulnerabilities on infrastructure, endpoints, networks, and applications.
Data encryption
All web traffic through Identra is encrypted via HTTPS and TLS 1.2. Data in the database is encrypted using AES-256 encryption. Decryption keys are stored on separate hosts and rotated on a regular basis.
Policies & training
A comprehensive set of security policies and trainings are made available and shared with all personnel with access to Identra systems.
Third party audits
In addition to our extensive internal scanning and testing program, we employ third-party security experts to perform penetration tests.
Logical access
Access to production systems is restricted to necessary personnel, is audited and monitored, and is secured with multi-factor authentication.
Internal controls
All fulltime employees undergo background checks and are administered security awareness training throughout their employment.
Privacy
Every decision we make begins with the safety and privacy of you and your customers' data in mind.
Data transfer practices
We perform transfers in a secure manner by encrypting data in transit. We are also able to support data residency in the US and the EU.
Privacy policy
Our Privacy Policy honors the CCPA/CPRA and GDPR frameworks. We are transparent about how we collect and use your data.
Privacy by design
Your data is yours to own. We never sell user data and provide you with secure methods to delete it in accordance with privacy regulations.
Privacy impact assessments
We continuously evaluate the impact of our activities on data privacy to ensure that we collect the minimum data needed and improve our practices.
Identra for Public Sector
The Identra platform is a cloud-native comprehensive identity verification platform tool hosted on Google Cloud Platform (GCP) that's designed to help federal agencies verify their users' identities. The core capabilities of the Identra Platform are as follows:
Identity verification
Identra offers multiple verification methods, including government ID verification (supporting over 200 countries and territories), selfie verification with biometric liveness detection, database verification, and NFC verification.
Fraud prevention
The platform employs device signals, passive signals (IP address, geolocation, device fingerprinting), and advanced algorithms to detect fraud attempts like deepfakes and spoofing.
Compliance solutions
Identra helps agencies meet global compliance requirements, including KYC (Know Your Customer), KYB (Know Your Business), and AML (Anti-Money Laundering).
Customizable Workflows
Agencies can create tailored verification journeys with drag-and-drop tools and custom rules.
"As we deal with sensitive health records, we needed a certified identity solution that would help us verify patients quickly, accurately, and safely. Not only did Identra meet all of these expectations, but their NIST IAL certification will also play a key role in our ability to help patients get more out of their health records."
Ready to safeguard your identity operations?
Create a secure account in minutes or talk to our security experts to customize verification workflows to fit your precise compliance requirements.