Persona
| Basic information | |
|---|---|
| Founded | 2018 |
| Legal Structure | |
| Industry | Software |
| Also known as | Persona Identities Inc. |
| Official website | https://withpersona.com/ |
Persona Identities, Inc. is an American identity verification company headquartered in San Francisco, founded in 2018 by Rick Song and Charles Yeh.
Persona has been sued under the Illinois Biometric Information Privacy Act by DoorDash drivers and a short-term rental guest who say it stored scans of their faces.[1][2] Reddit in the UK,[3] EU and Australia, Roblox,[4] OpenAI's ChatGPT,[5] LinkedIn,[6] Anthropic's Claude,[7] and Privacy.com[8] send users to Persona's face and ID checks to verify their age or identity. Persona's privacy policy says US residents agree to resolve disputes with Persona solely on an individual basis, with no class actions, and defines disputes to include the collection of facial scans.[9] A federal court denied Persona's motion to dismiss the rental guest's lawsuit on March 11, 2026.[10][11]
Consumer impact summary
[edit | edit source]User freedom
[edit | edit source]Reddit said that from July 14, 2025, Persona would perform age verification for its UK site, a measure Reddit introduced to comply with the UK's Online Safety Act.[12] Reddit requires UK users to confirm their age to access restricted content, and they confirm it through their Apple account on iOS or through Persona with a selfie or ID.[3]
Adults whom ChatGPT's age prediction places in its teen experience by mistake can have teen protections removed by verifying their age with Persona.[5] In Italy, OpenAI uses Persona for age verification while an account is active.[13] VRChat made age verification through Persona available to its VRC+ subscribers, and the verified status is permanent even after a subscription ends.[14]
The waiver in Persona's privacy policy reads:
YOU (IF YOUR ARE A RESIDENT OF THE UNITED STATES) AND PERSONA IDENTITIES, INC., INCLUDING ITS PARENTS, SUBSIDIARIES, AFFILIATES, SUCCESSORS, AND ASSIGNS (“COMPANY”) AGREE THAT ANY PROCEEDINGS TO RESOLVE OR LITIGATE ANY DISPUTE WILL BE CONDUCTED SOLELY ON AN INDIVIDUAL BASIS, AND THAT NEITHER YOU NOR COMPANY WILL SEEK TO HAVE ANY DISPUTE HEARD AS A CLASS ACTION, A REPRESENTATIVE ACTION, A COLLECTIVE ACTION, A PRIVATE ATTORNEY-GENERAL ACTION, OR IN ANY PROCEEDING IN WHICH YOU OR COMPANY ACTS OR PROPOSES TO ACT IN A REPRESENTATIVE CAPACITY. YOU AND COMPANY FURTHER AGREE THAT NO PROCEEDING WILL BE JOINED, CONSOLIDATED, OR COMBINED WITH ANOTHER PROCEEDING WITHOUT THE PRIOR WRITTEN CONSENT OF YOU, COMPANY, AND ALL PARTIES TO ANY SUCH PROCEEDING. THIS CLASS ACTION WAIVER COVERS ALL DISPUTES BETWEEN YOU AND COMPANY AND ALSO INCLUDES ANY DISPUTE BETWEEN YOU AND ANY OFFICER, DIRECTOR, BOARD MEMBER, AGENT, EMPLOYEE, VENDOR, AFFILIATE, OR CLIENT OF COMPANY, IF COMPANY COULD BE LIABLE, DIRECTLY OR INDIRECTLY, FOR SUCH DISPUTE.
THE TERM “DISPUTE” SHALL BE INTERPRETED AS BROADLY AS PERMITTED UNDER THE LAW AND SHALL APPLY TO ALL PAST, PRESENT, AND FUTURE LEGAL DISPUTES AND LEGAL CLAIMS BETWEEN YOU AND COMPANY THAT ARE NOW IN EXISTENCE OR THAT MAY ARISE IN THE FUTURE, INCLUDING, BUT NOT LIMITED TO LEGAL DISPUTES OR LEGAL CLAIMS ARISING OUT OF OR RELATING IN ANY WAY TO THESE TERMS, THE COLLECTION OF FACIAL SCANS OR BIOMETRIC INFORMATION, THE PRIVACY POLICY OR COMPANY’S SERVICES; YOUR RELATIONSHIP WITH COMPANY; YOUR USE OF ANY COMPANY PRODUCT OR SERVICE; COMPANY’S CONDUCT; AND ANY FEDERAL, STATE, OR LOCAL STATUTE, LAW, RULE, REGULATION OR ORDINANCE APPLICABLE TO THE RELATIONSHIP BETWEEN YOU AND COMPANY AS TO WHICH A COURT WOULD BE AUTHORIZED BY LAW TO GRANT RELIEF IF THE CLAIM WERE SUCCESSFUL (“DISPUTE” OR “DISPUTES”).
User privacy
[edit | edit source]Persona's privacy policy, last updated April 9, 2026, says it permanently destroys ID and selfie scan data when identity verification is complete or within three years of a user's last interaction, subject to the customer's retention period and unless law or legal process requires Persona to keep it.[9] For age checks, the policy says Persona's default setting is to delete all personal data, including age estimation and identity scan data, as soon as processing is complete and an outcome has been determined.[9] Customers may direct Persona to keep certain data, which may include identity scan data, for longer periods when necessary to detect, investigate or prevent suspicious or fraudulent activity, as disclosed to the user when they consent.[9] Persona wrote in June 2026 that Trail of Bits, a security firm it worked with, confirmed a hard-coded three-year maximum limit for retention in its code.[15]
Business model
[edit | edit source]Rick Song and Charles Yeh started Persona in 2018, and the company is headquartered in San Francisco.[16][15][17] Song is CEO,[15] and Yeh, his co-founder, was chief technology officer as of November 2023.[17][18] An Illinois appeals court described Persona Identities, Inc. as a software company that provides businesses automated identity verification services.[1] Persona's privacy policy says users provide data to Persona at the direction of those businesses, which it calls customers.[9]
Persona's October 7, 2025 blog post announced Authorized status at the Low Impact level under the Federal Risk and Authorization Management Program (FedRAMP),[19][20] and an April 2026 update to the post says Persona for Government received FedRAMP Moderate Authorized status through the 20x pilot program on April 10, 2026.[19]
Market control
[edit | edit source]This section is incomplete. This notice can be deleted once all the placeholder text has been replaced.
In the April 2025 post announcing its Series D, Song wrote that Persona had processed more than 300 million verifications in 2024 and doubled its revenue and customer count year over year.[21] The $200 million round valued the company at $2 billion.[16]
Privacy concerns
[edit | edit source]User data collected
[edit | edit source]User-provided data
[edit | edit source]For identity verification, Persona's privacy policy lists:
Depending on the method selected, you may be asked to provide only a subset of the following information:
- Name and contact information, including name, email address, address, and phone number;
- Demographic data, including birthdate and age;
- Files you upload, such as tax forms and utility bills;
- Government documents, barcodes, and identifiers, such as a passport, driver’s license or Social Security Number;
- Audio, Video, and Photos of you, namely from the selfie or video you provide and from your government identification document; and
- Biometric Data, only with your express consent, including a scan of your facial geometry based on the photos or video you provide. For more information about Biometric Data, see the Facial Scan and Biometrics Information section below.
Additional data from customer and/or third parties
[edit | edit source]The same section of the policy continues:
We may also collect the following information from you, our customer, or third parties to determine and provide the appropriate identity verification method for your jurisdiction and to support compliance with applicable laws and regulations:
- Current and previous name and contact information, including name, email address, address, and phone number;
- Demographic data, including birthdate and age, gender, marital status, and similar demographic details;
- Government documents, barcodes, and identifiers, such as drivers license and Social Security Numbers;
- Device information, including IP address, device type, your device’s operating system, browser, cookie and device identifiers, and other software including type, version, language, settings, and configuration;
- Account information, such as details about your account with our customer or other third parties;
- Publicly available data, including data from governmental public records, the public internet and social media;
- Geolocation data as we may infer your general geographic location (such as city, state, and country) based on your IP address. We do not collect precise geolocation data;
- Wireless Device Data, which consists of information about your account and wireless device, if available. To assist our customers in meeting business operations needs and to perform certain services and functions, you authorize your wireless carrier to use or disclose information about your account and your wireless device, if available, to us or our service provider for the duration of your business relationship, solely to help them identify you or your wireless device and to prevent fraud; and
- Additional Identity Data: We may verify personal data about you with our network of trusted third-party data sources, including the following: publicly available sources (such as open government databases), government and national ID registries, consumer credit bureaus, utility companies, mobile network providers and postal address databases. The types of this “Additional Identity Data” we obtain from these sources will vary depending on the verification checks available in the particular country. The purpose of the verification is never identified and your information is not sold to these third-party data sources. We also use service providers to determine your device’s location based on its IP address and to generate device identifiers.
Connection to Peter Thiel
[edit | edit source]Founders Fund led Persona's $150 million Series C in September 2021[22] and co-led its $200 million Series D with Ribbit Capital in April 2025.[16] PC Gamer described the lead investor in Persona's most recent funding rounds as a venture fund co-founded and directed by Peter Thiel,[23] and the Associated Press reported that Founders Fund is run by Thiel,[24] who co-founded Palantir Technologies and is a partner at Founders Fund.[25]
The Open Rights Group said on February 15, 2026 that Roblox, Reddit and Discord users were compelled to use a biometric ID system backed by the Palantir co-founder.[26] James Baker, Big Tech Programme Manager at the Open Rights Group, said in the group's press release:
People are worried, and angry, about having to hand over biometric scans of their face to overseas companies just to access online platforms.[26]
Persona chief operating officer Christie Kim told Ars Technica, in remarks quoted by Biometric Update, which publishes news about the global biometrics market,[27] that Thiel is an investor with no role in the company's operations:
He is not on our board, does not advise us, has no role in our operations or decision-making, and is not directly involved with Persona in any way. Persona and Palantir share no board members and have no business relationship with each other.[28]
Incidents
[edit | edit source]Roblox facial age estimation errors
[edit | edit source]- Main article: Roblox facial age estimation errors
Roblox began requiring users in the U.S. to complete an age check before chatting on January 7, 2026, and said the requirement would roll out to all regions where chat is available over the next week.[4] Its release names Persona as the vendor that processes Facial Age Estimation images and videos, and says chat is not accessible until an age check is complete.[4]
WIRED reported that the system was identifying children as adults and adults as children.[29] The magazine also reported that users verified as under 9 could chat only with players up to age 13.[29] It quoted one developer who wrote that the change was only harming your core userbase instead of providing any safety.[29] The magazine found eBay listings offering age-verified accounts for minors as young as 9 for as little as $4, which eBay said it was removing after WIRED flagged them.[29] WIRED also described a widely shared clip in which a boy who had drawn wrinkles and stubble on his face with black marker received a 21+ age rating.[29]
Roblox addressed some of the criticism in a January 9, 2026 update on its developer forum, which WIRED quoted:
We are aware of instances where parents age check on behalf of their children leading to kids being aged to 21+.[30][29]
Discord UK age verification test
[edit | edit source]Discord's chief technology officer and co-founder, Stanislav Vishnevskiy,[24] wrote on Discord's blog on February 24, 2026 that Discord ran a limited test with Persona in the UK only in January and decided not to move forward after completing it.[31]
Discord's age assurance help page told UK users in February 2026:
If you're located in the UK, you may be part of an experiment where your information will be processed by an age-assurance vendor, Persona. The information you submit will be temporarily stored for up to 7 days, then deleted.[32]
Vishnevskiy wrote that Discord's new bar for facial age estimation requires it to run entirely on-device, and that Persona did not meet that bar.[31] The same post said all test data was deleted after verification was completed.[31] Persona and Discord both told Fortune their partnership lasted less than a month and had ended before Persona's front-end files were found online.[33] The Associated Press reported that Discord distanced itself from Persona after the relationship became the subject of online criticism.[24]
Source map exposure on withpersona-gov.com test subdomain
[edit | edit source]On February 16, 2026, security researchers @vmfunc, @MDLcsgo and @DziurwaF published findings about frontend source maps, files that map compressed website code back to its readable original, exposed on a non-production subdomain under withpersona-gov.com, according to Persona's post-incident review.[34] Persona's timeline records that it disabled the onyx subdomain at 5:34 p.m. PST the same day.[34]
PC Gamer reported that the researchers described 53 megabytes of unprotected source maps on a FedRAMP government endpoint.[23] Malwarebytes reported that they found 2,456 accessible files.[35]
According to the researchers, as relayed by Malwarebytes, the software can perform 269 distinct verification checks, run facial recognition against watchlists and politically exposed persons, and screen for adverse media across 14 categories, including terrorism and espionage.[35] The cybersecurity news site Cybernews reported that Persona's platform had built-in functionality for filing direct reports to FinCEN, the US Treasury's financial intelligence unit, and to Canada's equivalent, FINTRAC.[36] Persona wrote in June 2026 that its customers in financial services may file anti-money laundering reports to government agencies through its platform to comply with regulations.[15] The cryptocurrency news site DL News[37] summarized the researchers' findings as including an integration that lets operators monitor crypto addresses.[38]
Persona's post-incident review, published February 24, 2026, says the test deployment ran in a separate project isolated from its FedRAMP-validated environment, and that This entire domain has never had any federal customers and has zero customer data.[34] Persona told Malwarebytes in a March 13, 2026 update that No personal data was exposed.[35] It also said No Persona customer uses all the possible 269 checks.[35]
Song told Fortune the files were uncompressed files of a front end that’s already on every single person’s device, and that the 269 checks are options Persona offers, not all of which a client would necessarily need.[33] DL News reported that Song, in emails he posted on X, said his firm did not work with any federal agency.[38] Kim told Ars Technica, as quoted by Biometric Update, that potential government contracts Persona was working on were for workforce account security of government employees and did not include U.S. Immigration and Customs Enforcement (ICE)[39] or any Department of Homeland Security agency.[28]
Song wrote in a June 22, 2026 post about a code review by Trail of Bits:
Trail of Bits went through our admin tools, login systems, and infrastructure and found no evidence of any channel or backdoor that would allow law enforcement into Persona or into your data.[15]
The same post acknowledged that a company could hide something in a way its code would not reveal, and said Persona did not give Trail of Bits access to its customers' data.[15]
Lawsuit
[edit | edit source]DoorDash driver biometric privacy lawsuit
[edit | edit source]Charles Washington and Katie Sims registered to become DoorDash delivery drivers in 2021, submitting selfies and photographs of their driver's license cards, which DoorDash authenticated with Persona's identity verification software.[1] They sued Persona in late 2021 under the Biometric Information Privacy Act, in a proposed class action alleging that Persona possessed and profited from their biometric information without publicly disclosing a retention and destruction policy.[1] Persona moved to compel arbitration under DoorDash's contract with the drivers, claiming beneficiary status, and the circuit court granted the motion.[1] On August 13, 2024, the Appellate Court of Illinois, Third District, reversed that order, holding that Persona has no legitimate basis to compel plaintiffs’ claims to arbitration.[1] On November 27, 2024, the Illinois Supreme Court denied Persona's petition for leave to appeal (No. 131059).[40]
Sonder rental guest biometric privacy class action
[edit | edit source]David Freifeld, an Illinois resident, filed a federal class action against Sonder Holdings and Persona Identities in the Northern District of Illinois on June 28, 2024.[2][11] His complaint says he booked a Sonder-managed rental, The Hillsboro in Hillsboro Beach, Florida, through Expedia in late May 2024, and was then asked for an image of his driver's license.[2] It alleges that Persona, as Sonder's contractor, captured and stored the face geometry from the license photo, compared it to him at check-in, and gave him no disclosure about how the data would be used, stored or retained.[2] The complaint claims Sonder and Persona violated 740 ILCS 14/15(b) by failing to obtain informed written consent before obtaining biometric identifiers and information.[2]
The court denied Persona's motion to dismiss on March 11, 2026.[10][11] On March 27, 2026, Persona asked the court to certify an interlocutory appeal and stay the case, identifying this as the controlling question of law:
Whether a company whose business is authenticating the identity of customers conducting financial and nonfinancial transactions qualifies as a financial institution or an affiliate of a financial institution that is subject to Title V of the federal Gramm-Leach-Bliley Act of 1999 and the rules promulgated thereunder (“GLBA”), and is therefore exempt from the Illinois Biometric Information Privacy Act (“BIPA”), 740 ILCS 14/1 et seq.[10]
DoorDash identity theft lawsuit
[edit | edit source]Sandra Dickson, a 71-year-old resident of Aberdeen, Washington, sued Checkr, DoorDash and Persona in the U.S. District Court for the Western District of Washington on July 13, 2026.[41] Her original complaint alleges that an identity thief posing as her with a fake ID was able to bypass PERSONA’s identity verification system and worked for DoorDash in her name.[41] It says she then received nearly $60,000 in tax bills from the IRS based on the income the thief earned driving for DoorDash.[41] The original complaint brought a Washington State Consumer Protection Act claim against DoorDash and Persona and asked for an injunction requiring the two companies to overhaul their procedures to protect identity theft victims.[41] An amended complaint was filed on September 10, 2026.[42]
Products
[edit | edit source]- Identity Verification[9]
- Age Verification, which Persona's privacy policy calls age assurance, including selfie age estimation[9]
- Risk and screening reports, including watchlist and adverse media screening, listed in the navigation of Persona's website[43]
- Persona for Government[19]
Clients
[edit | edit source]Companies and products that use or have used Persona, or that name it as a provider:
| Company/Product | Used for | Additional notes |
|---|---|---|
| Anthropic (Claude) | Identity Verification | Anthropic says it selected Persona as its verification partner and that users' ID and selfie are collected and held by Persona.[7] The Register reported on April 16, 2026 that Anthropic may check ID before letting users access certain Claude features.[44] |
| BlockFi | Named by Persona as a customer in September 2021[22] | |
| Brex | Named by Persona as a customer in September 2021[22] | |
| Coursera | Named by Persona as a customer in September 2021[22] | |
| Discord | Age Verification | Tested Persona in the UK only in January 2026 and decided not to move forward[31] |
| DoorDash | Identity Verification | Used Persona's software to authenticate delivery drivers, who submitted selfies and driver's license photos, according to a 2024 Illinois appellate opinion.[1] A 2026 lawsuit alleges that an identity thief with a fake ID bypassed Persona's identity verification system.[41] |
| Gusto | Named by Persona as a customer in September 2021[22] | |
| Handshake | Identity Verification | Used during onboarding for the Handshake AI Fellowship[45] |
| Identity Verification | Available to members with a government-issued ID from supported countries[6] | |
| OpenAI (ChatGPT) | Age Verification | Adults placed in the teen experience by mistake can verify their age with Persona[5] |
| Privacy.com | Identity verification | Biometric information collected by Persona might be stored up to 3 years |
| Age Verification | Used by Reddit to comply with the UK Online Safety Act[12] | |
| Robinhood | Named by Persona as a customer in September 2021[22] | |
| Roblox | Age Verification | Persona processes Facial Age Estimation images and videos; players who skip the age check cannot use chat. Launched in the U.S. on January 7, 2026[4] |
| Sonder | Named by Persona as a customer in September 2021[22] | |
| Square | Named by Persona as a customer in September 2021[22] | |
| VRChat | Age Verification | Available to VRC+ subscribers; verification stays permanent after a subscription ends[14] |
| Wealthsimple | Identity Verification | Wealthsimple's privacy policy says it may use biometric ID verification providers, such as Persona, to confirm the authenticity of photo identification[46] |
Third parties
[edit | edit source]Persona's subprocessor list, last updated August 22, 2026, names these third parties that may process customer personal data, and marks each as required or conditional depending on the services a customer chooses.[43] Persona's privacy policy says it does not use any personal data, including biometric data, for any AI or model training.[9]
| Company | What is data used for | Required or conditional |
|---|---|---|
| Anthropic | Data Extraction and Analysis | Conditional |
| AWS | Infrastructure, Image Processing | Required |
| ClickHouse, Inc. | Database Services | Required |
| IBM Corporation (formerly Confluent, Inc.) | ETL Services | Required |
| DBT | ETL Services | Required |
| Elasticsearch Inc. | Search and Analytics Engine | Required |
| FingerprintJS | Device Analysis | Conditional |
| Google Cloud Platform | Infrastructure as a Service | Required |
| Groqcloud | Data Extraction and Analysis | Conditional |
| MongoDB | Database Services | Required |
| OpenAI | Data Extraction and Analysis | Conditional |
| Resistant AI | Document Analysis | Conditional |
| Sigma Computing | Data Analytics | Required |
| Snowflake | Database Services | Required |
| Stripe | Credit Card Processing | Conditional |
| Twilio | Communication APIs (Phone Numbers, SMS) | Conditional |
| Persona Identities Canada Inc. | Customer Support and Development | Conditional |
See also
[edit | edit source]References
[edit | edit source]- ↑ 1.0 1.1 1.2 1.3 1.4 1.5 1.6 "Washington v. Persona Identities Inc (2024)". FindLaw. Appellate Court of Illinois, Third District. 2024-08-13. Archived from the original on 2025-09-01. Retrieved 2026-09-24.
- ↑ 2.0 2.1 2.2 2.3 2.4 "Freifeld v. Sonder Holdings Inc., No. 1:24-cv-05459, Complaint" (PDF). CourtListener. U.S. District Court for the Northern District of Illinois. 2024-06-28. Archived (PDF) from the original on 2026-09-25. Retrieved 2026-09-24.
- ↑ 3.0 3.1 "United Kingdom: Online Safety Act". Reddit. Archived from the original on 2026-05-30. Retrieved 2026-09-24.
- ↑ 4.0 4.1 4.2 4.3 "Roblox Requires Users Worldwide to Age-Check to Access Chat". Roblox. 2026-01-07. Archived from the original on 2026-09-02. Retrieved 2026-09-24.
- ↑ 5.0 5.1 5.2 "Age prediction in ChatGPT". OpenAI Help Center. Archived from the original on 2026-09-20. Retrieved 2026-09-24.
- ↑ 6.0 6.1 "Identity verification via Persona". LinkedIn. Archived from the original on 2026-09-28. Retrieved 2026-09-24.
- ↑ 7.0 7.1 "Identity verification on Claude". Claude. Anthropic. Archived from the original on 2026-09-23. Retrieved 2026-09-24.
- ↑ Rossmann, Louis (2026-09-24). "revoking my endorsement of privacy.com". YouTube. Archived from the original on 2026-09-24. Retrieved 2026-09-24.
- ↑ 9.00 9.01 9.02 9.03 9.04 9.05 9.06 9.07 9.08 9.09 9.10 9.11 9.12 "Processor Privacy Policy". Persona. 2026-04-09. Archived from the original on 2026-09-09. Retrieved 2026-09-24.
- ↑ 10.0 10.1 10.2 "Freifeld v. Persona Identities Inc., No. 1:24-cv-05459, Defendant's Motion to Amend and Certify Order for Interlocutory Appeal and to Stay" (PDF). CourtListener. U.S. District Court for the Northern District of Illinois. 2026-03-27. Archived (PDF) from the original on 2026-09-25. Retrieved 2026-09-24.
- ↑ 11.0 11.1 11.2 "Freifeld v. Sonder Holdings Inc., 1:24-cv-05459". CourtListener. Archived from the original on 2026-09-25. Retrieved 2026-09-24.
- ↑ 12.0 12.1 Jordan, Dearbail (2025-07-14). "Reddit starts verifying ages of users in the UK". BBC News. Archived from the original on 2026-09-24. Retrieved 2026-09-24.
- ↑ "Why am I being asked to verify my age?". OpenAI Help Center. Archived from the original on 2026-09-25. Retrieved 2026-09-24.
- ↑ 14.0 14.1 "Age Verification Now Available for VRC+ Subscribers". VRChat. 2025-01-28. Archived from the original on 2026-09-24. Retrieved 2026-09-24.
- ↑ 15.0 15.1 15.2 15.3 15.4 15.5 Song, Rick (2026-06-22). "An independent code review of Persona's data practices". Persona. Archived from the original on 2026-09-25. Retrieved 2026-09-24.
- ↑ 16.0 16.1 16.2 "Persona raises $200M at $2B valuation to build the verified identity layer for an agentic AI world". PR Newswire. Persona. 2025-04-30. Archived from the original on 2026-09-18. Retrieved 2026-09-24.
- ↑ 17.0 17.1 "From reluctant founder to $2B valuation: The story of Persona | Rick Song (Co-founder and CEO)". First Round Review. Archived from the original on 2026-09-24. Retrieved 2026-09-24.
- ↑ "Ask a fintech founder: Rick Song and Charles Yeh, Persona". Visa. 2023-11-01. Archived from the original on 2026-09-24. Retrieved 2026-09-24.
- ↑ 19.0 19.1 19.2 Chang, Timothy (2025-10-07). "Persona's FedRAMP® Authorized status expands fraud prevention and identity verification options for federal agencies". Persona. Archived from the original on 2026-09-25. Retrieved 2026-09-24.
- ↑ "FedRAMP". U.S. General Services Administration. Archived from the original on 2026-09-25. Retrieved 2026-09-24.
- ↑ Song, Rick (2025-04-30). "Announcing Persona's $200M Series D". Persona. Archived from the original on 2026-06-19. Retrieved 2026-09-24.
- ↑ 22.0 22.1 22.2 22.3 22.4 22.5 22.6 22.7 "Persona Closes $150 Million Round Led by Founders Fund To Scale the World's First Trusted Identity Infrastructure". PR Newswire. Persona. 2021-09-15. Archived from the original on 2026-04-01. Retrieved 2026-09-24.
- ↑ 23.0 23.1 Edser, Andy (2026-02-20). "Security researchers claim Persona, the provider behind Discord's UK age verification 'experiment', performs '269 individual verification checks' on user data, including those for terrorism and espionage". PC Gamer. Archived from the original on 2026-09-01. Retrieved 2026-09-24.
- ↑ 24.0 24.1 24.2 Huamani, Kaitlyn (2026-02-24). "Discord delays global age verification rollout after criticism". Associated Press. Archived from the original on 2026-08-30. Retrieved 2026-09-24.
- ↑ "Peter Thiel". Founders Fund. Archived from the original on 2026-09-24. Retrieved 2026-09-24.
- ↑ 26.0 26.1 "Roblox, Reddit and Discord users compelled to use biometric ID system backed by Palantir co-founder Peter Thiel". Open Rights Group. 2026-02-15. Archived from the original on 2026-08-21. Retrieved 2026-09-24.
- ↑ "About Us". Biometric Update. Archived from the original on 2026-09-25. Retrieved 2026-09-24.
- ↑ 28.0 28.1 McConvey, Joel R. (2026-02-23). "Persona pushes back against fears its age assurance tech isn't secure". Biometric Update. Archived from the original on 2026-07-21. Retrieved 2026-09-24.
- ↑ 29.0 29.1 29.2 29.3 29.4 29.5 Gilbert, David (2026-01-13). "Roblox's AI-Powered Age Verification Is a Complete Mess". Wired. Archived from the original on 2026-08-19. Retrieved 2026-09-24.
- ↑ "Age Check to Chat Update and Fast Follow Roadmap". Roblox Developer Forum. Roblox. 2026-01-09. Archived from the original on 2026-09-25. Retrieved 2026-09-24.
- ↑ 31.0 31.1 31.2 31.3 Vishnevskiy, Stanislav (2026-02-24). "Getting Global Age Assurance Right: What We Got Wrong and What's Changing". Discord. Archived from the original on 2026-09-25. Retrieved 2026-09-24.
- ↑ "How to Complete Age Assurance on Discord". Discord. Archived from the original on 2026-02-12. Retrieved 2026-09-24.
- ↑ 33.0 33.1 Gioino, Catherina (2026-02-24). "Discord distances itself from Peter Thiel-backed verification software after its code was found on a Google Cloud endpoint". Fortune. Archived from the original on 2026-09-25. Retrieved 2026-09-24.
- ↑ 34.0 34.1 34.2 34.3 Harris, Neal (2026-02-24). "Post-incident review: Source map exposure on non-production subdomain". Persona. Archived from the original on 2026-08-01. Retrieved 2026-09-24.
- ↑ 35.0 35.1 35.2 35.3 Arntz, Pieter (2026-02-20). "Age verification vendor Persona left frontend exposed, researchers say". Malwarebytes. Archived from the original on 2026-09-24. Retrieved 2026-09-24.
- ↑ Naprys, Ernestas (2026-02-19). "Firm that verifies mugshots for ChatGPT and Roblox feeds US surveillance apparatus with 269 distinct checks". Cybernews. Archived from the original on 2026-09-08. Retrieved 2026-09-24.
- ↑ "Markets, DeFi, Regulation and top cryptocurrency news". DL News. Archived from the original on 2026-09-25. Retrieved 2026-09-24.
- ↑ 38.0 38.1 Craig, Tim; Kelly, Liam (2026-02-19). "OpenAI KYC provider accused of sharing users' crypto addresses with federal agencies". DL News. Archived from the original on 2026-09-24. Retrieved 2026-09-24.
- ↑ "Who We Are". U.S. Immigration and Customs Enforcement. Archived from the original on 2026-09-25. Retrieved 2026-09-24.
- ↑ 40.0 40.1 "Leave to Appeal Docket, November 27, 2024" (PDF). Illinois Courts. Supreme Court of Illinois. 2024-11-27. Archived (PDF) from the original on 2025-07-15. Retrieved 2026-09-24.
- ↑ 41.0 41.1 41.2 41.3 41.4 "Dickson v. Checkr, Inc., No. 3:26-cv-05774, Complaint" (PDF). CourtListener. U.S. District Court for the Western District of Washington. 2026-07-13. Archived (PDF) from the original on 2026-09-25. Retrieved 2026-09-24.
- ↑ "Dickson v. Checkr Inc, 3:26-cv-05774". CourtListener. Archived from the original on 2026-09-25. Retrieved 2026-09-24.
- ↑ 43.0 43.1 "Subprocessors". Persona. 2026-08-22. Archived from the original on 2026-09-18. Retrieved 2026-09-24.
- ↑ Vigliarolo, Brandon (2026-04-16). "If you want into Anthropic's Claude club, you may have to show ID". The Register. Archived from the original on 2026-09-13. Retrieved 2026-09-24.
- ↑ Jaci (2026-07-30). "Troubleshooting Persona identity verification". Handshake Help Center. Archived from the original on 2026-07-21. Retrieved 2026-09-24.
- ↑ "Privacy Policy". Wealthsimple. 2026-06-08. Archived from the original on 2026-09-17. Retrieved 2026-09-24.