Skip to main content
ID.me logo

ID.me

Security and trust center evidence

id.meIdentity and accessLast verified 17 Sep 2026

Summary

ID.me has 2 registry-verified rows in the CertReports index, last verified 17 Sep 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

As of 17 Sep 2026, ID.me is listed in the FedRAMP registry as FedRAMP Authorized, with the authorization issued on 10 Jun 2021 and audited by Fortreum, LLC, with no expiration date recorded. As of 17 Sep 2026, ID.me is listed in the EU-US Data Privacy Framework registry as Active for the EU-US Certification and UK Extension Certification, issued 31 Oct 2024 and expiring 14 Oct 2026. As of 17 Sep 2026, no public evidence found for SOC 2 for ID.me. As of 17 Sep 2026, no public evidence found for HIPAA/BAA for ID.me. As of 17 Sep 2026, no subprocessor entries were found in the evidence rows for ID.me.

  • FedRAMP: listed in fedramp registry as FedRAMP Authorized, issued 10 Jun 2021, no expiration date, auditor Fortreum, LLC (as of 17 Sep 2026)
  • EU-US Data Privacy Framework: listed in dpf registry as Active (EU-US Certification, UK Extension Certification), issued 31 Oct 2024, expires 14 Oct 2026 (as of 17 Sep 2026)
  • SOC 2 and HIPAA: no public evidence found for ID.me (as of 17 Sep 2026)

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 17 Sep 2026; it is regenerated whenever a row changes.

Among identity and access vendors

2verified rows

Category median 1, across 47 indexed identity and access vendors. ID.me has more verified rows than 96 percent of them.

authenticationdigital identitygovernment ididentity verification

Compliance grid

Subprocessors

No subprocessor list captured yet.

Similar vendors with evidence

Related by product tags and the Identity and access category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.