Persona Achieves FedRAMP Moderate Authorization for Identity Verification

Persona, the leading verified identity platform, announced Federal Risk and Authorization Management Program (FedRAMP) Moderate Authorization, enabling U.S. Federal agencies to deploy its identity platform to verify identities, prevent fraud, and secure digital services. The platform is now listed on the FedRAMP Marketplace and is available to Federal agencies directly and through Carahsoft Technology Corp., The Trusted Government IT Solutions Provider.

Read More: What Is the Future of Data Architecture: Data Mesh or Data Fabric?

As CIOs and CISOs at Government agencies work to modernize their digital infrastructure and defend against increasingly sophisticated cyber threats, identity verification has become a frontline control. Today’s fraud is AI-driven at a scale and sophistication that legacy verification tools were not built to detect. In April 2024, the U.S. Government Accountability Office estimated annual fraud losses between $233 billion and $521 billion. Persona helps agencies detect these threats, protect user privacy, and adjust verification flows as requirements change.

Persona’s platform is widely used by some of the largest and fastest-growing consumer technology brands across a variety of industries. The technology enables these organizations to securely verify users and fight fraud at scale while keeping user privacy at the forefront throughout the process.

“Federal agencies face the same identity threats that financial institutions, healthcare organizations, and technology platforms have been fighting for years — synthetic identities, deepfakes, and automated fraud at scale. FedRAMP® Moderate Authorization ensures that Government agencies can access Persona’s battle-tested infrastructure, authorized for the programs where the security bar is highest,” said Robert Kozyra, Public Sector GTM Lead at Persona.

Identity verification that adapts as fast as cyber threats evolve

Persona’s FedRAMP® Moderate Authorized platform gives agencies a dynamic option to achieve compliance and stay ahead of evolving threats. Unlike legacy tools that lock agencies into rigid workflows, Persona enables teams to update verification flows in real time as the threat landscape shifts — maintaining compliance without re-procurement cycles or months-long approval processes.

Key capabilities include:

• Government ID verification: Supports 200+ countries and territories across a wide range of identity document types
• Liveness detection: Built to stop deepfakes and presentation attacks
• Passive fraud signals: Device, IP, and behavioral data analyzed in real time
• Dynamic workflow orchestration: Adjust verification flows as threat landscapes and program requirements change

Agencies can deploy Persona for benefits enrollment integrity, account recovery, contractor and workforce onboarding, and secure access to citizen-facing digital portals.

Security and compliance

Persona uses multi-layered security controls, third-party audits, access controls, and continuous vulnerability scanning to protect against cyberattacks and other threats. Hosted on Google Cloud Platform with AES-256 encryption, TLS 1.2+, and data residency controls, Persona’s platform gives agencies granular control over data access, storage, retention, and redaction policies. Persona’s security posture is validated through a range of independent certifications and compliance frameworks, including FedRAMP® Moderate Authorization, Kantara IAL2, SOC 2 Type II, ISO 27001, HIPAA, FIPS 140-2, and NIST SP 800-53.

Read More: Women in Tech Global Conference 2026: Key Takeaways from the Industry’s Most Influential Voices

“Persona’s FedRAMP® Moderate-authorized platform helps agencies stay ahead of evolving threats, not just meet a compliance requirement,” said Stephen Eng, Federal Compliance Lead at Persona. “Identity verification is essential to protecting public programs and expanding access to digital services. Persona helps agencies do both.”

Persona achieved FedRAMP® Moderate Authorization through the FedRAMP 20x program. Selected as one of 13 vendors in the FedRAMP® 20x Phase 2 pilot — the only identity verification provider in the cohort — Persona earned its place through an engineering-led approach to compliance: automated, machine-readable infrastructure built to meet complex Federal requirements. Persona is also Moderate Ready under the traditional Rev. 5 authorization path.

“FedRAMP Moderate Authorization gives agencies confidence that Persona can help them modernize identity verification for digital services while meeting Federal security requirements,” said Harjeet Khalsa, Sales Director, Google Federal & ISV Ecosystem at Carahsoft. “Carahsoft and its reseller partners are pleased to work with Persona to give acquisition teams a straightforward path to deploying modern identity infrastructure without waiting on additional assessment cycles.”

Write to us [⁠wasim.a@demandmediaagency.com] to learn more about our exclusive editorial packages and programmes.