Veriff

At Veriff, we continuously test our technology and processes against the world’s most stringent standards. Here is the latest status of our security certifications, independent audits, and industry credentials: FIDO Document Authenticity Certification We are proud to announce that Veriff has successfully achieved the FIDO Alliance Document Authenticity (DocAuth) Certification for our Full Auto Identity Verification (IDV) solution. The certification was accomplished following rigorous testing by Ingenium Biometrics, a FIDO-accredited laboratory, this validation confirms our ability to: - Accurately verify identities using government-issued documentation. - Match IDs seamlessly with “selfie” images. - Defend against advanced threats, including forged documents and face morphing. Read more: Veriff Fido Alliance certification SOC 2 Type II Our annual independent examination concluded with a clear report and no exceptions noted, confirming our internal controls function at the highest level. ISO/IEC 27001:2022 Surveillance audit passed! We have upgraded our privacy controls to the new 2025 ISO 27018 standard across our Identity, Biometric, and Fraud Prevention services. Also, we have officially added our new São Paulo, Brazil office to our certified scope. _(Verify via the_ _Schellman Certificate Directory)_ Cyber Essentials Annual renewal successfully completed with our official…

Veriff has received UK DIATF certification to the latest Gamma (0.4) standard. This certification confirms our ongoing compliance with a set of UK government-approved rules and standards designed for conducting certified identity verification checks, including for Right to Rent (RTR) and Right to Work (RTW). Our certification covers confidence levels L1B, M1A, and M1B. What UKDIATF is for: It acts as a standard for digital identity service providers (IDSPs) in the UK to verify the identity of individuals online for various purposes, such as for Right to Work and Right to Rent checks. Veriff UKDIATF certification is publicly available here: - Certificate - Register of digital identity and attribute services

Confirming that Veriff is not affected by the React2Shell vulnerability. Our security team has conducted a thorough assessment of our environment and confirmed that the specific software components and configurations required for the React2Shell exploit are not in use within our service architecture. To ensure ongoing security, we have retained our protective WAF rules and continue monitoring all incoming traffic for suspicious activity. This vulnerability is a critical remote code execution flaw in React Server Components (used by Next.js and other frameworks), but since Veriff doesn't use this technology, we are not vulnerable to the exploit.

Veriff is observing an active phishing campaign using fake websites such as www(.)station(.)verriff(.)com and www(.)station(.)verifff(.)com that perfectly mimic our official login page www.station.veriff.com. At a glance, these websites look legitimate, however, if you take a closer look, you see that the Veriff name is misspelled in the website address (URL). The fraudsters' goal is to trick you into entering your credentials, which they can then use to gain access to your Veriff Station account. To protect yourself: - ALWAYS check the website address (URL) in your browser's address bar before logging in. - Do not log in if the URL is not our official domain (e.g., check for subtle misspellings or extra characters). If you suspect you entered your credentials on a fake site, please change your password on the real site, www.station.veriff.com, immediately. This type of fraud is called typosquatting. To learn more: What is typosquatting and how to protect your business in 6 steps.

Welcome! This is our official Trust Center. We built this page to be your quick source of truth for everything related to Veriff security and compliance. Our goal is simple: clear, factual transparency. What information can you find here: - Compliance and certification - Controls - Subprocessors - Resources - Security updates How to stay informed: - Bookmark this page for fast reference. - Subscribe to updates to get immediate email.