Selected as the Only Identity Verification Provider in the FedRAMP 20x Pilot, Persona Enables Agencies to Securely Modernize Digital Services While Combating AI-Driven Fraud

SAN FRANCISCO--(BUSINESS WIRE)--

Persona, the leading verified identity platform, today announced Federal Risk and Authorization Management Program (FedRAMP®) Moderate Authorization, enabling U.S. Federal agencies to deploy its identity platform to verify identities, prevent fraud, and secure digital services. The platform is now listed on the FedRAMP Marketplace and is available to Federal agencies directly and through Carahsoft Technology Corp., The Trusted Government IT Solutions Provider®.

As CIOs and CISOs at Government agencies work to modernize their digital infrastructure and defend against increasingly sophisticated cyber threats, identity verification has become a frontline control. Today's fraud is AI-driven at a scale and sophistication that legacy verification tools were not built to detect. In April 2024, the U.S. Government Accountability Office estimated annual fraud losses between $233 billion and $521 billion. Persona helps agencies detect these threats, protect user privacy, and adjust verification flows as requirements change.

Persona’s platform is widely used by some of the largest and fastest-growing consumer technology brands across a variety of industries. The technology enables these organizations to securely verify users and fight fraud at scale while keeping user privacy at the forefront throughout the process.

"Federal agencies face the same identity threats that financial institutions, healthcare organizations, and technology platforms have been fighting for years — synthetic identities, deepfakes, and automated fraud at scale. FedRAMP® Moderate Authorization ensures that Government agencies can access Persona’s battle-tested infrastructure, authorized for the programs where the security bar is highest," said Robert Kozyra, Public Sector GTM Lead at Persona.

Identity verification that adapts as fast as cyber threats evolve

Persona's FedRAMP® Moderate Authorized platform gives agencies a dynamic option to achieve compliance and stay ahead of evolving threats. Unlike legacy tools that lock agencies into rigid workflows, Persona enables teams to update verification flows in real time as the threat landscape shifts — maintaining compliance without re-procurement cycles or months-long approval processes.

Key capabilities include:

Government ID verification: Supports 200+ countries and territories across a wide range of identity document types

Liveness detection: Built to stop deepfakes and presentation attacks

Passive fraud signals: Device, IP, and behavioral data analyzed in real time

Dynamic workflow orchestration: Adjust verification flows as threat landscapes and program requirements change

Agencies can deploy Persona for benefits enrollment integrity, account recovery, contractor and workforce onboarding, and secure access to citizen-facing digital portals.

Security and compliance

Persona uses multi-layered security controls, third-party audits, access controls, and continuous vulnerability scanning to protect against cyberattacks and other threats. Hosted on Google Cloud Platform with AES-256 encryption, TLS 1.2+, and data residency controls, Persona’s platform gives agencies granular control over data access, storage, retention, and redaction policies. Persona's security posture is validated through a range of independent certifications and compliance frameworks, including FedRAMP® Moderate Authorization, Kantara IAL2, SOC 2 Type II, ISO 27001, HIPAA, FIPS 140-2, and NIST SP 800-53.

"Persona's FedRAMP® Moderate-authorized platform helps agencies stay ahead of evolving threats, not just meet a compliance requirement," said Stephen Eng, Federal Compliance Lead at Persona. "Identity verification is essential to protecting public programs and expanding access to digital services. Persona helps agencies do both."

Persona achieved FedRAMP® Moderate Authorization through the FedRAMP 20x program. Selected as one of 13 vendors in the FedRAMP® 20x Phase 2 pilot — the only identity verification provider in the cohort — Persona earned its place through an engineering-led approach to compliance: automated, machine-readable infrastructure built to meet complex Federal requirements. Persona is also Moderate Ready under the traditional Rev. 5 authorization path.

"FedRAMP Moderate Authorization gives agencies confidence that Persona can help them modernize identity verification for digital services while meeting Federal security requirements," said Harjeet Khalsa, Sales Director, Google Federal & ISV Ecosystem at Carahsoft. “Carahsoft and its reseller partners are pleased to work with Persona to give acquisition teams a straightforward path to deploying modern identity infrastructure without waiting on additional assessment cycles.”

For Federal agencies evaluating identity verification solutions, FedRAMP® Moderate Authorization removes a significant procurement barrier. Persona is listed on the FedRAMP Marketplace and is available through Carahsoft’s SEWP V contracts NNG15SC03B and NNG15SC27B, ITES-SW2 Contract W52P1J-20-D-0042, NASPO ValuePoint Master Agreement #AR2472, TIPS Contract #220105, OMNIA Partners Contract #R240303, E&I Contract #EI00063~2021MA and The Quilt Master Service Agreement Number MSA05012019-F. For more information, contact the Carahsoft Team at (571) 591-6210 or [email protected]; or learn more at withpersona.com/industry/public-sector.

About Persona

Persona Identities, Inc. (Persona) offers a unified identity platform that gives organizations the building blocks they need to securely collect, verify, manage, and make decisions about individuals' and businesses' identities — along with automation and orchestration tools to streamline the entire process from end to end.

Founded in 2018, Persona is headquartered in San Francisco and is available in 200+ countries and territories and 20 different languages. Persona supports consumer-facing businesses across a variety of sectors including public sector agencies, retail, fintech, marketplace, delivery services, real estate and hospitality, HR, edtech, legal services, home and childcare services, and more. For additional information, please visit withpersona.com.

About Carahsoft

Carahsoft Technology Corp. is The Trusted Government IT Solutions Provider, supporting Public Sector organizations across Federal, State and Local Government agencies and Education and Healthcare markets. As the Master Government Aggregator® for our vendor partners, we deliver solutions for Cybersecurity, MultiCloud, DevSecOps, Artificial Intelligence, Customer Experience and Engagement, Open Source and more. Working with resellers, systems integrators and consultants, our sales and marketing teams provide industry leading IT products, services and training through hundreds of contract vehicles. Visit us at www.carahsoft.com.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260521233540/en/

Source: Persona