CAN/DGSI 127:2025 Certification

ACCS is the trusted global leader in age assurance certification. We can now certify your systems against CAN/DGSI 127:2025, helping you demonstrate compliance, build trust, and reduce risk in the Canadian market.
CAN/DGSI 127:2025 is the National Standard of Canada for Age Assurance Technologies
Make an EnquiryApply now
Home » CAN/DGSI 127:2025 Certification
Age Assurance - Age Check Certification Scheme (ACCS)

CAN/DGSI 127:2025 is the National Standard of Canada for Age Assurance Technologies. Developed by the Digital Governance Standards Institute (DGSI) and accredited by the Standards Council of Canada (SCC), it sets out the minimum requirements for verifying, estimating, or inferring a person’s age in digital environments.

The standard provides a clear framework for the design, risk assessment, selection, and deployment of age assurance technologies — ensuring they are privacy-preserving, secure, proportionate, transparent, and effective.

It incorporates and aligns with international benchmarks such as ISO/IEC 27566 and IEEE 2089.1, while tailoring requirements to Canadian law, privacy obligations, and child-protection frameworks.

Who this is for

Certification applies to organisations that:

  • Online platforms – streaming, gaming, social media, or e-commerce services offering age-restricted goods, content, or interactions.
  • Age assurance providers – developers and operators of verification, estimation, or hybrid systems.
  • Global providers – companies entering the Canadian market seeking regulator and stakeholder trust signals.
  • Any service needing to demonstrate compliance with Canadian privacy, online harms regulation, and child rights obligations.

What we do

As an independent accredited conformity assessment body, ACCS delivers testing and certification against CAN/DGSI 127:2025.

Our certification process involves:

  • Assessing compliance with Canadian legal and privacy frameworks.
  • Evaluating chosen age assurance methods (verification, estimation, hybrid) against proportionality, accuracy, robustness, and user rights.
  • Reviewing technology design for Privacy by Design/Default, Security by Design, accessibility, and interoperability.
  • Confirming risk and child rights impact assessments are carried out.
  • Issuing a Certificate of Conformity and Schedule of Certification covering scope, services, and assurance levels achieved.

How certification works

Our process is structured, transparent, and consistent with other international standards:

  1. Readiness & scoping – Define service boundaries, user base, methods in use, and Canadian legal obligations.
  2. Testing & demonstration – Independent evaluation of system behaviour; functional demonstrations where applicable (e.g., biometric or estimation systems).
  3. Evidence review – Submit structured documentation including assurance logic, PIAs/CRIAs, controls, and compliance mapping.
  4. Assessment – ACCS auditors review policies, technical design, data flows, and operational processes.
  5. Audit findings & remediation – Receive detailed results, with guidance on corrective actions if required.
  6. Certification – Certificate of Conformity + Schedule issued; optional listing on our public registry.

Why choose CAN/DGSI 127:2025 Certification?

  • Regulatory alignment – Demonstrates compliance with Canadian online safety, privacy, and child rights law.
  • Local recognition – As a National Standard of Canada, it carries weight with regulators, policymakers, and Canadian stakeholders.
  • Global consistency – Harmonises with ISO/IEC 27566 and IEEE 2089.1, supporting trust across jurisdictions.
  • Independent oversight – Certification by ACCS provides impartial, trusted, and accredited evaluation.
  • User trust – Signals to parents, NGOs, and relying parties that your service is robust, safe, and privacy-preserving.
  • Reduced risk – Provides evidence of due diligence in case of regulatory or legal scrutiny.

What is CAN/DGSI 127:2025?

It is the National Standard of Canada for Age Assurance Technologies. It sets the minimum requirements for designing, selecting, and deploying age assurance systems in a way that is proportionate, privacy-preserving, and compliant with Canadian law.

Why do I need this certification if I already follow ISO/IEC 27566 or IEEE 2089.1?

While ISO and IEEE are globally recognised, CAN/DGSI 127:2025 is nationally accredited by the Standards Council of Canada (SCC). If you operate in Canada, this certification provides a jurisdiction-specific mark of conformity and demonstrates alignment with Canadian privacy law, child rights frameworks, and online safety regulation.

Which organisations should apply?

  • Online platforms offering age-restricted content or goods in Canada.
  • Age assurance and digital ID providers entering the Canadian market.
  • Global companies needing Canadian recognition of compliance.

Does this standard mandate a specific method of age assurance?

No. It is method-neutral. Acceptable approaches include document checks, biometrics, age estimation, cross-account authentication, capacity tests, or authorised confirmation — provided they are proportionate to risk and designed with privacy, security, and child protection at their core.

Is there testing of the system involved, and what metrics are used?

Yes. Certification involves an independent assessment of design, operation, and outcomes against the standard. This includes:

  • Documentation review (PIA, CRIA, risk analysis).
  • Design evaluation (Privacy by Design/Default, Security by Design, accessibility, proportionality).
  • Operational assessment (data minimisation, deletion, no secondary use, transparency, dispute resolution).
  • Functional demonstration (where applicable, e.g., biometric or estimation systems).

Key metrics include:

  • Accuracy – ability to determine age or age range correctly.
  • Reliability – consistency of results across users and contexts.
  • Robustness – performance in real-world environments.
  • Proportionality – appropriateness of the chosen method relative to risk.
  • Privacy & security compliance – minimisation, deletion, and secure handling.

For biometric/estimation systems, quantitative metrics may also be applied, in line with IEEE 2089.1 Levels of Confidence (LoCs) and NIST benchmark evaluations, such as:

  • False Acceptance Rate (FAR) / False Rejection Rate (FRR)
  • True Positive / False Positive ratios
  • Precision and recall across different age bands
  • Error rates under varied demographic and environmental conditions

This ensures consistency with international testing practices, while reflecting Canadian legal and privacy obligations.

Will regulators recognise this certification?

Yes. As a National Standard of Canada, CAN/DGSI 127:2025 certification is recognised under the authority of the SCC. It provides a credible assurance signal to regulators, policymakers, and enforcement agencies.

How is personal data protected under this standard?

The standard requires strict data minimisation, no secondary use, no profiling or monetisation, and secure deletion of data once the assurance process is complete. Systems must embed Privacy by Design and Privacy by Default.

What happens if a user disputes their age assurance result?

Providers must offer a clear, accessible, and cost-free dispute resolution mechanism, so users can challenge or appeal decisions.

Explore other services in Age Assurance

Age Check Certification Scheme
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.