Skip to main content

Compare

GBG vs Onfido

The ten framework pages always appear, plus any other framework a compared vendor has evidence for. Every cell links to the evidence with its capture date.

CSV
GBG logoGBGONOnfido
GBG logo
GBG
Identity and access
1 verified
4 stated
12 Oct 2026
ON
Onfido
Identity and access
1 verified
0 stated
12 Oct 2026
11 of 11 frameworks
FrameworkGBG logoGBGONOnfido
HIPAAHIPAA mark, CertReports state No public evidenceNo public evidenceHIPAA mark, CertReports state No public evidenceNo public evidence
SOC 2differsSOC 2 mark, CertReports state Vendor-stated as of 12 Oct 2026Vendor-statedas of 12 Oct 2026SOC 2 mark, CertReports state No public evidenceNo public evidence
GDPRGDPR mark, CertReports state No public evidenceNo public evidenceGDPR mark, CertReports state No public evidenceNo public evidence
FedRAMPdiffersFedRAMP mark, CertReports state Vendor-stated as of 12 Oct 2026Vendor-statedas of 12 Oct 2026FedRAMP mark, CertReports state No public evidenceNo public evidence
PCI DSSPCI DSS mark, CertReports state Verified as of 12 Oct 2026Verifiedas of 12 Oct 2026 · to 31 May 2027 · KirkpatrickPrice, Inc. dba Raven EyePCI DSS mark, CertReports state Verified as of 12 Oct 2026Verifiedas of 12 Oct 2026 · to 31 Jan 2027 · Panacea Infosec (P) Ltd.
ISO/IEC 27001differsISO/IEC 27001 mark, CertReports state Vendor-stated as of 12 Oct 2026Vendor-statedas of 12 Oct 2026ISO/IEC 27001 mark, CertReports state No public evidenceNo public evidence
CSA STARCSA STAR mark, CertReports state No public evidenceNo public evidenceCSA STAR mark, CertReports state No public evidenceNo public evidence
Cyber EssentialsCyber Essentials mark, CertReports state No public evidenceNo public evidenceCyber Essentials mark, CertReports state No public evidenceNo public evidence
ISO/IEC 27701ISO/IEC 27701 mark, CertReports state No public evidenceNo public evidenceISO/IEC 27701 mark, CertReports state No public evidenceNo public evidence
ISO/IEC 42001ISO/IEC 42001 mark, CertReports state No public evidenceNo public evidenceISO/IEC 42001 mark, CertReports state No public evidenceNo public evidence
Cyber Essentials PlusdiffersCyber Essentials Plus mark, CertReports state Vendor-stated as of 12 Oct 2026Vendor-statedas of 12 Oct 2026Cyber Essentials Plus mark, CertReports state No public evidenceNo public evidence

Rows shaded wheat differ between vendors. "No public evidence" means nothing public was found at the last check, never that a vendor lacks the attestation.