Identity Assurance FAQ

We offer certification and independent testing in our UKAS accredited lab. We test in accordance with the Common Criteria, from EAL 1-7.

Identity Assurance certification gives you and your customers confidence in your product. It also helps you win more business from potential clients; and offer peace of mind for your clients’ customers. It is an independent way of demonstrating that your system is reliable and works, making it an excellent option for attracting investors to your identity check business.

Our Identity Assurance services are used by ID verification service providers to demonstrate that their system works. It’s ideal for any company who creates and sells ID check systems to the retail, gaming, travel and finance industries.

We can test all kinds of ID verification systems. This includes biometrics, database lookups, presentation attack detection mechanisms, and artificial intelligence-based solutions.

To apply for our certification scheme, you’ll need documentation about your approach to identity validation; information about your policies on data protection and privacy; and information about your quality management system. We’ll also request further information from you throughout the certification process.

You can get certified in as little as 12 weeks. This depends on your policies and test environment being ready for audit, so for faster certification please ensure you have these ready to go prior to getting certified.

When we’ve completed technical testing on your system, you’ll receive a report that tells you whether your system is suitable to be deployed. In this report, you’ll see which areas of your system are and aren’t working, so you can fix these problems.

PASS2:2020 plays a crucial role in determining your system’s accuracy and validity. It’s a code of practice that offers best practice guidance for identity verification providers.

We also use relevant ISO evaluation criteria to certify the system against ISO19795 and ISO30107, depending on which method you use to verify identity. ISO19795 is used to test the performance of biometric technologies. ISO30107 tests the performance of presentation attack detection mechanisms.

Your certificate is valid for 2 years. When you’re approaching your certificate expiry dates, we’ll get in touch to arrange recertification of your system. If you haven’t made any major changes to your system in this time, you can usually get recertified for a fraction of the cost of your initial certification.