# onfido

Source: https://startwithidentity.com/vendors/identity-verification/onfido/
Last updated: 2026-09-20
License: content by Start with Identity. Cite the source URL.

---

## Overview

Onfido is now Entrust IDV. Entrust [completed the acquisition](https://www.biometricupdate.com/202404/entrust-completes-onfido-acquisition-vision-box-and-amadeus-close-deal) on 9 April 2024 and has since retired the brand: onfido.com redirects to Entrust, the developer docs have moved, and Entrust runs a page explaining the transition. The legal entity Onfido Ltd survives and remains the registered party on the UK Digital Verification Services register. We keep this profile under the Onfido name because that is what buyers still search for.

The product does document and biometric [identity verification](https://startwithidentity.com/guides/compliance/customer-identity-verification-guide/) at enterprise scale, now sold inside a much larger security portfolio.

## What it is good at

Enterprise procurement fit and regulatory coverage in Europe. Entrust IDV carries ETSI TS 119 461 and EN 319 401 certification mapped to eIDAS, plus Romanian remote video identification approval, which matters for regulated European deployments in a way most US-origin competitors cannot match. It sits on the UK statutory verification register, and it has a public vulnerability disclosure programme running with YesWeHack.

It also submits real algorithms to NIST rather than only publishing marketing claims. Reported rankings from the January 2026 FRTE update show the onfido_002 algorithm improving substantially, from 289th to 178th on one track, with the engineering team publicly targeting the top 100. That is modest placement, but the willingness to be measured is worth something in a category where many vendors never submit at all.

## Where it falls short

Certificate currency is the immediate issue. The published UK trust framework certificate expired on 29 September 2024, and the ETSI page states validity only to 31 May 2025. Neither has a published successor we could find. The presentation attack detection picture has the same problem in a different form: the only Entrust-branded iBeta result is Level 1 from July 2026, while the Level 2 results sit on legacy Onfido products tested in 2022, before current deepfake techniques.

No pricing is published at all. And the business is materially smaller than acquisition-era figures implied, with filed accounts showing 224 staff against marketing claims of more than 500.

Entrust's parent-level history deserves a question in diligence. Chrome and Mozilla distrusted its public TLS certificate authority in 2024 after documented compliance failures, and Entrust sold that business to Sectigo in January 2025. The IDV stack was unaffected, but the governance record is a fair thing to ask about.

## Pricing

Unpublished and quote-only. Model your all-in cost with our [TCO calculator](https://startwithidentity.com/tools/tco-calculator/).

## Best for, and who should look elsewhere

Choose Entrust IDV for regulated European deployments where eIDAS and ETSI coverage matter, and where buying from a large security vendor is an advantage. Choose [Sumsub](https://startwithidentity.com/vendors/identity-verification/sumsub/) for published pricing and current Level 2 testing, [Persona](https://startwithidentity.com/vendors/identity-verification/persona/) for workflow flexibility, or [Yoti](https://startwithidentity.com/vendors/identity-verification/yoti/) for age assurance.

## Bottom line

A credible enterprise verification platform with genuine European regulatory coverage, now absorbed into Entrust, carrying certificates and liveness results that need refreshing before they can be relied on.