Persona
Security and trust center evidence
Persona is the configurable identity platform built for businesses in a digital-first
Summary
Persona has 3 registry-verified rows in the CertReports index, last verified 2 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
Persona is listed in the FedRAMP registry as FedRAMP Authorized, issued 10 Apr 2026, as of 9 Oct 2026. Persona is listed in the CSA STAR registry with a Level 1 self-assessment (CAIQ), issued 28 Jul 2026, as of 5 Oct 2026. Persona is listed in the EU-US Data Privacy Framework registry as active across the EU-US, SW-US and UK Extension certifications, issued 23 Aug 2016 and set to expire 30 Jan 2027, as of 5 Oct 2026. No public evidence found for a SOC 2 Type II report as of 5 Oct 2026. No public evidence found for ISO 27001 certification or a HIPAA BAA as of 5 Oct 2026.
- FedRAMP: listed in FedRAMP registry as Authorized, issued 10 Apr 2026 (as of 9 Oct 2026)
- CSA STAR: Level 1 self-assessment (CAIQ) listed, issued 28 Jul 2026 (as of 5 Oct 2026)
- EU-US Data Privacy Framework: active EU-US, SW-US and UK Extension certifications, expires 30 Jan 2027 (as of 5 Oct 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 10 Oct 2026; it is regenerated whenever a row changes.
Among identity and access vendors
3verified rows
Category median 1, across 78 indexed identity and access vendors. Persona has more verified rows than 96 percent of them.
amldigital identityidentity verificationkyc
Compare with similar vendors
Pick your own comparisonCompliance grid
FedRAMPVerifiedFedRAMP Authorized
as of 1 Nov 202646 sources · First Information Technology Services, Inc.
CSA STARVerifiedSTAR Level 1 self-assessment (CAIQ)
as of 26 Oct 20266 sources
EU-US Data Privacy FrameworkVerifiedActive: SW-US Certification, EU-US Certification, UK Extension Certification
as of 2 Nov 20261 source
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Change history
- 29 Sep 2026EU-US Data Privacy Framework renewedExpiry moved from 2027-01-27 to 2027-01-30.
- 18 Sep 2026First indexed by CertReports3 evidence rows across 3 frameworks entered the index.
Similar vendors with evidence
Related by product tags and the Identity and access category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Socure
Identity and access
Socure is the leading AI-powered identity verification platform trusted by 3,000+ customers to verify consumers, businesses, & employees
Daon
Identity and access
Daon, The Digital Identity Trust company, empowers organizations worldwide to establish customer trust through intelligent identity
Mitek Systems
Identity and access
Know your customers, verify transactions, and securely grow your business with identity verification and authentication in a single
GBG
Identity and access
We offer a range of solutions that help organisations quickly validate and verify the identity and location of their
Evidence against regulations
All regulations for PersonaHow much of each regulation’s vendor requirements Persona’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read