Persona

Persona: frequently asked questions

How much does Persona cost?

Persona publishes a real entry price, which is rare in this category. The Essential plan is 250 dollars per month on an annual contract, including 500 services per month, where a service is one verification or one report, with additional services at 1.50 dollars each. The included allotment does not roll over. Growth and Enterprise are quote-only and add advanced report types, fraud configuration, third-party integrations, the Graph link-analysis tool and implementation support. A Startup Program offers free monthly allotments to eligible startups and developers, with the allotment size unpublished. There is no published per-verification rate card by check type; at the Essential tier everything bills as a generic service.

How accurate is Persona and is there independent proof?

There is no independent proof in the public record, and that is the honest answer. Persona does not appear in any NIST face benchmark: not FRTE 1:1 or 1:N, not FATE PAD, not FATE Quality. Its security page references iBeta, but no PAD level is published and no iBeta confirmation letter for Persona appears in iBeta's public letter registry, unlike Veriff, Veridas and others who have dated Level 2 letters. It also references Kantara and NIST SP 800-63, but we could not locate a Kantara Trust Status List entry or approval announcement for Persona, whereas IDEMIA, Experian, LexisNexis, Proof and Login.gov all have dated public grants. This is consistent with Persona operating as an orchestration platform that composes third-party biometric engines rather than submitting its own algorithm, which is a legitimate architecture, but it means no third-party-measured error rate exists. Treat the iBeta and Kantara references as vendor-asserted until a certificate or registry entry is produced.

What happened with Persona and Discord in February 2026?

On 16 February 2026 researchers found that Persona had left frontend JavaScript source maps exposed on a non-production subdomain created for its FedRAMP authorization process. Around 2,456 files totalling roughly 53 MB were reachable. Persona says it disabled the subdomain within an hour. This was an information-disclosure misconfiguration, not a data breach: no user personal data, biometrics, credentials or API secrets were confirmed exposed by any source, including the researchers. The damage was reputational and commercial. The exposed code revealed a capability inventory of up to 269 individual verification checks across 14 categories, including adverse-media screening, PEP and watchlist facial screening, risk scoring and suspicious activity report filing to FinCEN and FINTRAC. On 24 February 2026 Discord ended its relationship with Persona and delayed its age-verification rollout to the second half of 2026. Persona's COO also stated publicly that Persona is not partnered with ICE or any Department of Homeland Security agency.

Is Persona FedRAMP authorized?

No. As of February 2026 Persona was in the FedRAMP authorization process, which is how the non-production government subdomain involved in the source-map exposure came to exist. In process is not the same as authorized, and we found no evidence of a completed authorization. Federal buyers should check the FedRAMP Marketplace directly.

What compliance certifications does Persona hold?

Persona's security page lists SOC 2 Type II, ISO 27001, Kantara against NIST SP 800-63, HIPAA, FERPA, the Age Check Certification Scheme, Germany's KJM youth-protection certification and iBeta, plus GDPR and CCPA compliance. Two caveats matter. The SOC 2 report is available only on request by email rather than through a self-serve trust portal, and no audit period or report date is published. And as covered above, the Kantara and iBeta references could not be confirmed against the relevant public registries. We were also unable to read Persona's security page directly during this review, so treat this list as reported rather than verified.

How much of Persona's coverage is actually documented?

Less than most competitors publish. Government ID verification spans 200 or more countries and territories, confirmed in Persona's help centre, and the platform covers KYC, KYB, AML, age assurance and employee verification in 20 languages. But the detailed coverage maps for Government ID Verification, Database Verification, Document AI and KYB are accessible only to customers on a current plan and are not visible to trial accounts. So there is no public document-type count, which most IDV vendors do publish. That combination, a transparent entry price but a gated coverage map, is unusual.

How well funded is Persona?

Well. It raised a 150 million dollar Series C led by Founders Fund in September 2021 at a 1.5 billion dollar valuation, then a 200 million dollar Series D led by Founders Fund and Ribbit Capital on 30 April 2025 at a 2 billion dollar valuation, bringing total disclosed funding to at least 417.5 million dollars. Named customers include OpenAI, LinkedIn, Etsy, Twilio and Block. Founded in October 2018 by Rick Song and Charles Yeh, both still in post. Employee count and revenue are not disclosed, and the figures on data aggregators disagree with each other.

What are the best Persona alternatives?

Sumsub if independent biometric evidence matters: it holds a dated March 2025 iBeta Level 2 result and publishes a full rate card. Entrust IDV, formerly Onfido, for an established enterprise footprint with NIST FRTE submissions. Jumio for large regulated deployments. Stripe Identity if you need straightforward document and selfie verification at published per-check pricing and can live without AML or KYB. Alloy if orchestration across many data vendors is the actual requirement.

Related on Start with Identity

• Vendor
  Alloy

  top_tier

• Vendor
  AU10TIX

  strong

• Vendor
  BioCatch

  strong

• Comparison
  jumio-vs-onfido

  Jumio and Onfido do the same job: check a document, match a face, screen a watchlist. The split is independence against Entrust ownership, and SDK quality.