Onfido

Onfido: frequently asked questions

Is Onfido still called Onfido?

No. Entrust acquired Onfido, completing on 9 April 2024, and has since retired the brand. As of 2026 onfido.com returns a 301 redirect to Entrust's identity verification page, the developer documentation has moved to Entrust's domain, and Entrust operates a transition page titled Onfido Is Now Entrust IDV. The legal entity Onfido Ltd, Companies House number 07479524, still exists and is the registered party on the UK Digital Verification Services register, where the service is listed as Entrust IDV. Buyers will now meet the Onfido name only in legacy API integrations and legal paperwork. We keep this profile under the Onfido name because that is still what people search for. The acquisition price was never officially disclosed; press reports based on unnamed sources put it between 400 and 650 million dollars.

How much does Entrust IDV cost?

Entrust publishes no identity verification pricing. There is no public rate card, no per-verification figure, no minimum commitment and no pricing page. Every quote goes through sales. Per-verification numbers circulating on comparison and affiliate sites have no primary source, and several are published by competitors, so we do not repeat them.

Does the Entrust certificate authority distrust affect Onfido?

Not technically, but it is a fair due-diligence question. In 2024 Google Chrome stopped trusting Entrust TLS certificates issued after 11 November 2024, and Mozilla did the same for certificates issued after 30 November 2024, with Mozilla's policy record citing 22 separate compliance incidents between March and May 2024. That affected Entrust's public certificate authority business, which Entrust then sold to Sectigo, announced 29 January 2025. It did not affect the identity verification stack, and no Onfido or Entrust IDV product was distrusted. The legitimate question for buyers is not product security but governance and incident-response culture at the parent company.

How accurate is Entrust IDV and is there independent testing?

Mixed, with a recency problem worth understanding. On presentation attack detection, the only Entrust-branded iBeta result is Level 1, dated 27 July 2026. The Level 2 results are on the legacy Onfido liveness products and date to January and June 2022, more than four years old and predating the current deepfake threat environment. On face recognition, Entrust does submit algorithms to NIST: as reported from the 23 January 2026 NIST FRTE update, the onfido_002 algorithm placed 178th on VISA-BORDER, 131st on BORDER-KIOSK and 146th on BORDER-BORDER, improved from 289th previously, with Entrust stating an ambition to reach the top 100. Those rankings come via trade reporting rather than our own read of the NIST report. No independent demographic bias testing has been published.

Is Entrust IDV certified under the UK digital identity trust framework?

It is listed on the UK statutory Digital Verification Services register as Onfido Ltd with the service name Entrust IDV, record last updated 31 March 2026. The publicly available NQA certificate, number 74701, covers Onfido Limited as an Identity Service Provider for Right to Work and enhanced Disclosure and Barring Service schemes at identity profiles M1A and H1A, explicitly excluding reusable digital identities and delegated authority. That certificate ran from 29 September 2022 to 29 September 2024 and we could not locate a published successor. Similarly, Entrust's ETSI and eIDAS certification page states validity only until 31 May 2025. Ask Entrust for current certificates rather than relying on the published documents.

What compliance does Entrust IDV hold?

SOC 2 Type II and ISO/IEC 27001 are both claimed, the latter reportedly certified by BSI under certificate IS 660122, though we were unable to read Entrust's own pages directly to confirm either and no audit date or period is published. Entrust IDV holds ETSI TS 119 461 and EN 319 401 certification mapped to the eIDAS Regulation, plus certification against Romania's Decision 564/2021 for remote video identification, with the validity caveat noted above. A public vulnerability disclosure programme runs with YesWeHack. No NIST IAL2 conformance assertion and no Kantara Trust Status List entry could be found.

How big is the Onfido business?

Smaller than the acquisition-era marketing suggested. Audited accounts filed at Companies House for Onfido Ltd covering the financial year to January 2024 show revenue of 86.8 million pounds, down about 10 percent year on year, with revenue from principal activities of 64.2 million pounds, up 12 percent, operating losses reduced by roughly 60 percent, and headcount of 224 following a 19 percent workforce reduction. Figures circulated at acquisition time of more than 500 employees and over 140 million dollars in revenue cover an overlapping period and cannot be reconciled with the filed accounts; they appear to be pre-restructuring numbers. Entrust is privately held and does not break out IDV results.

What are the best Onfido and Entrust IDV alternatives?

Sumsub for published pricing and a dated 2025 iBeta Level 2 result. Persona for configurable workflows and a published entry price. Jumio for large regulated deployments with broad document coverage. Yoti if age assurance is the actual requirement, since it leads NIST's age estimation evaluation and is certified on the UK register in its own name. Veriff as a European alternative with recent Level 2 testing.

Related on Start with Identity

• Comparison
  jumio-vs-onfido

  Jumio and Onfido do the same job: check a document, match a face, screen a watchlist. The split is independence against Entrust ownership, and SDK quality.

• Vendor
  Alloy

  top_tier

• Vendor
  AU10TIX

  strong

• Vendor
  BioCatch

  strong

• Comparison
  persona-vs-veriff

  Persona is a verification flow you design and branch. Veriff is a high-automation document and biometric check you switch on. How varied your users are decides