cd /news/ai-policy/persona · home › topics › ai-policy › article
[ARTICLE · art-139332] src=consumerrights.wiki ↗ pub= topic=ai-policy verified=true sentiment=↓ negative

Persona

Persona Identities Inc., the identity-verification vendor that runs face and ID checks for Reddit, Roblox, ChatGPT, LinkedIn and Claude, has been sued under the Illinois Biometric Information Privacy Act by DoorDash drivers and a short-term rental guest who say it stored scans of their faces, according to a 2024 appellate ruling in Washington v. Persona Identities Inc. and a June 28, 2024 complaint in Freifeld v. Sonder Holdings Inc. filed in the U.S. District Court for the Northern District of Illinois. A rewritten company page also states Persona can retain ID scans for up to 3 years and lists its subprocessors, and cites a Discord UK age-verification test and Roblox age checks.

by read65 min views1 publishedSep 24, 2026
Persona
Image: Consumerrights (auto-discovered)

| m Changed logo to SVG. | | rewrote the page with sources for the lede, the illinois biometric lawsuits, the discord uk test, the roblox age checks and the withpersona-gov.com source map exposure. fixed the government data sharing claim to match what the sources say, sourced the clients table per row, replaced the third parties table with persona's subprocessor list, added screenshots of the privacy policy, the court docket and persona's incident review | |

| Line 1: |  | Line 1: |  | 
|  |  |  | {{#seo: |

| | | | |description=Persona runs face and ID checks for Reddit, Roblox, ChatGPT, LinkedIn and Claude, can keep ID scans up to 3 years, and was sued under Illinois biometric law. |

|  |  |  | }} | 
|  | {{CompanyCargo |  | {{CompanyCargo |

| | |Logo=Persona logo.svg | | |Logo=Persona logo.svg | | | |Type=Private | | |Type= | | | |Website=https://withpersona.com/ | | |Website=https://withpersona.com/ | | | |Description=Identity Verification | | |Description=Scans faces and IDs for Reddit, Roblox and ChatGPT age checks, can keep ID scans up to 3 years, and has been sued under Illinois biometric privacy law | | | |Industry=Software|Founded=October 2018|CompanyAlias=Persona Identities Inc. | | |Industry=Software | | | | | |Founded=2018 | | | | | |ParentCompany= | | | | | |CompanyAlias=Persona Identities Inc. | | | }} | | }} | | | Persona is an Identity Verification company, founded in 2018 byRick Song and Charles Yeh .It is funded by the Founders Fund, <ref>{{Cite web |title=Persona |url=https://foundersfund .com/company /persona / |url -status =live |archive-url=https ://web.archive.org/web/20260228040423 /https://foundersfund .com/company /persona / |archive-date=2026-02 -28 |website=Founders Fund }}</ref>an adventure capitalist firm co-founded by Peter Thiel. <ref>{{Cite web |title=Peter Thiel |url=https://foundersfund .com/team /peter -thiel / |url-status =usurped |archive-url=https ://web.archive.org/web/20160528193728 /http ://foundersfund .com/team /peter -thiel / |archive-date=2016 -05-28 |website =Founders Fund }}</ref><ref>{{Cite web |last =Redacto |date=2026-02-16 |title=Discord Tested AgeVerification Vendor Persona: What Users Should Know |url=https://redact .dev /blog /discord -persona -age -verification -experiment |url-status =live |archive-url=https://ghostarchive .org /archive /PAWXp |archive-date=2026-02 -26 |website=redact .dev }}</ref> <! --This is awkward, but archive.org saysthey don't host this anymore :https ://web.archive.org/web/20260224122954 /https://redact .dev /blog /discord -persona -age -verification -experiment ....so archive .today has been put as thearchive URL --> | | '''Persona''' has been sued under the Illinois Biometric Information Privacy Act by DoorDash drivers & a short-term rental guest who say it stored scans of their faces.<ref name="wash">{{Cite web |title=Washington v. Persona Identities Inc (2024) |url=https://caselaw.findlaw.com/court/il-court-of-appeals/116477461.html |date=2024-08-13 |website=FindLaw |publisher=Appellate Court of Illinois, Third District |archive-url=http://web.archive.org/web/20250901042159/https://caselaw.findlaw.com/court/il-court-of-appeals/116477461.html |archive-date=2025-09-01 |access-date=2026-09-24}}</ref><ref name="freifeld">{{Cite web |title=Freifeld v. Sonder Holdings Inc., No. 1:24-cv-05459, Complaint |url=https://storage.courtlistener.com/recap/gov.uscourts.ilnd.460843/gov.uscourts.ilnd.460843.1.0.pdf |date=2024-06-28 |website=CourtListener |publisher=U.S. District Court for the Northern District of Illinois |access-date=2026-09-24}}</ref> [[Reddit]] in the UK,<ref name="reddit-help">{{Cite web |title=United Kingdom: Online Safety Act |url=https://support.reddithelp.com/hc/en-us/articles/47163677520276-How-does-age-verification-work-in-the-UK |website=Reddit Help |archive-url=http://web.archive.org/web/20260530200904/https://support.reddithelp.com/hc/en-us/articles/47163677520276-How-does-age-verification-work-in-the-UK |archive-date=2026-05-30 |access-date=2026-09-24}}</ref> [[Roblox]],<ref name="roblox-ir">{{Cite web |title=Roblox Requires Users Worldwide to Age-Check to Access Chat |url=https://ir.roblox.com/news/news-details/2026/Roblox-Requires-Users-Worldwide-to-Age-Check-to-Access-Chat/default.aspx |date=2026-01-07 |website=Roblox |archive-url=http://web.archive.org/web/20260902064122/https://ir.roblox.com/news/news-details/2026/Roblox-Requires-Users-Worldwide-to-Age-Check-to-Access-Chat/default.aspx |archive-date=2026-09-02 |access-date=2026-09-24}}</ref> [[OpenAI]]'s [[ChatGPT]],<ref name="openai-age">{{Cite web |title=Age prediction in ChatGPT |url=https://help.openai.com/en/articles/12652064-age-prediction-in-chatgpt |website=OpenAI Help Center |archive-url=http://web.archive.org/web/20260920121754/https://help.openai.com/en/articles/12652064-age-prediction-in-chatgpt |archive-date=2026-09-20 |access-date=2026-09-24}}</ref> [[LinkedIn]]<ref name="linkedin">{{Cite web |title=Identity verification via Persona |url=https://www.linkedin.com/help/linkedin/answer/a1718024 |website=LinkedIn Help |archive-url=http://web.archive.org/web/20241003194757/https://www.linkedin.com/help/linkedin/answer/a1718024 |archive-date=2024-10-03 |access-date=2026-09-24}}</ref> & [[Anthropic]]'s [[Claude]]<ref name="anthropic">{{Cite web |title=Identity verification on Claude |url=https://support.claude.com/en/articles/14328960-identity-verification-on-claude |website=Claude Help Center |publisher=Anthropic |archive-url=http://web.archive.org/web/20260923191742/https://support.claude.com/en/articles/14328960-identity-verification-on-claude |archive-date=2026-09-23 |access-date=2026-09-24}}</ref> send users to Persona's face & ID checks to verify their age or identity. Persona's privacy policy says US residents agree to resolve disputes with Persona solely on an individual basis, with no class actions, & defines disputes to include the collection of facial scans.<ref name="pp">{{Cite web |title=Processor Privacy Policy |url=https://withpersona.com/legal/privacy-policy |date=2026-04-09 |website=Persona |archive-url=http://web.archive.org/web/20260909132156/https://withpersona.com/legal/privacy-policy/ |archive-date=2026-09-09 |access-date=2026-09-24}}</ref> A federal court denied Persona's motion to dismiss the rental guest's lawsuit on March 11, 2026.<ref name="freifeld-64">{{Cite web |title=Freifeld v. Persona Identities Inc., No. 1:24-cv-05459, Defendant's Motion to Amend and Certify Order for Interlocutory Appeal and to Stay |url=https://storage.courtlistener.com/recap/gov.uscourts.ilnd.460843/gov.uscourts.ilnd.460843.64.0.pdf |date=2026-03-27 |website=CourtListener |publisher=U.S. District Court for the Northern District of Illinois |access-date=2026-09-24}}</ref><ref name="freifeld-docket">{{Cite web |title=Freifeld v. Sonder Holdings Inc., 1:24-cv-05459 |url=https://www.courtlistener.com/docket/68897755/freifeld-v-sonder-holdings-inc/ |website=CourtListener |access-date=2026-09-24}}</ref> | | | Starting on July14th , 2025, Personabegan working with [[Reddit]] to performID checks on its UKwebsite ,as part of the UK's Online Safety Act.<ref>{{Cite news |last=Jordan |first=Dearbail~~|date=2025-07-14~~ |title=Reddit starts verifying ages of users in the UK |url=https://www.bbc.co.uk/news/articles/cj4ep1znk4zo |url -status =live |archive-url=https ://web.archive.org/web/20260225142635 /https://www.bbc.co.uk/news/articles/cj4ep1znk4zo |archive-date=2026-02 -25 |access-date=2026-02 -20 |work=BBC News }}</ref> | | ==Consumer impact summary== | | | | | ===User freedom=== | | | | | Reddit said that from July 14, 2025, Persona would perform age verification for its UK site, a measure Reddit introduced to comply with the UK's Online Safety Act.<ref name="bbc">{{Cite news |last=Jordan |first=Dearbail |title=Reddit starts verifying ages of users in the UK |url=https://www.bbc.co.uk/news/articles/cj4ep1znk4zo |date=2025-07-14 |work=BBC News |archive-url=http://web.archive.org/web/20260924193006/https://www.bbc.co.uk/news/articles/cj4ep1znk4zo |archive-date=2026-09-24 |access-date=2026-09-24}}</ref> Reddit requires UK users to confirm their age to access restricted content, & they confirm it through their Apple account on iOS or through Persona with a selfie or ID.<ref name="reddit-help" /> | | | In February 2026 ,[[Discord]] announced that they would be experimenting with Personato perform ID checks worldwide .<ref>{{Cite web~~|last=Bubbles |date=2026-02-24~~ |title=How toComplete Age Assurance on Discord |url=https://support .discord .com~~/hc~~ /en~~-us~~ /articles/30326565624343 -How -to -Complete -Age -Assurance -on -Discord |url -status=live |archive-url =https://web.archive.org/web/20260212201755/https://support.discord.com/hc/en-us/articles/30326565624343-How-to-Complete-Age-Assurance-on-Discord |archive -date=2026-02 -12 |website=Discord }}</ref><ref>{{Citenews |date=2026-02-09 |title=Discord is rolling out facial scanning and ID checks globally in March forusers who don't want to be locked into a 'teen-appropriate experience' |url=https://www .pcgamer .com/games /discord -is-rolling-out-facial-scanning-and-id-checks-in-march-for-everyone-who-doesnt-want-to-be-locked-into-a-teen -appropriate -experience/ |url-status =live |archive-url=http://web.archive.org/web/20260214175605 /https://www .pcgamer .com/games /discord-is-rolling-out-facial-scanning-and-id-checks-in-march-for-everyone-who-doesnt-want -to-be-locked-into-a-teen-appropriate-experience/ |archive-date=2026-02 -14 |access-date=2026-02 -20 |work=PC Gamer }}</ref>Following heavy backlash from their users, Discord reversed the decision. | | Adults whom ChatGPT's age prediction places in its teen experience by mistake can have teen protections removed by verifying their age with Persona.<ref name="openai-age" /> In Italy, OpenAI uses Persona for age verification while an account is active.<ref name="openai-italy">{{Cite web |title=Why am I being asked to verify my age? |url=https://help.openai.com/en/articles/8411987-why-am-i-being-asked-to-verify-my-age |website=OpenAI Help Center |access-date=2026-09-24}}</ref> [[VRChat]] made age verification through Persona available to its VRC+ subscribers, & the verified status is permanent even after a subscription ends.<ref name="vrchat">{{Cite web |title=Age Verification Now Available for VRC+ Subscribers |url=https://hello.vrchat.com/blog/age-verification |date=2025-01-28 |website=VRChat |archive-url=http://web.archive.org/web/20260924193614/https://hello.vrchat.com/blog/age-verification |archive-date=2026-09-24 |access-date=2026-09-24}}</ref> |

|  | ~~==Consumer impact summary==~~ |  | The waiver in Persona's privacy policy reads: | 
|  | ~~===User freedom===~~ |  | <blockquote> |

| | Products and services with the services provided by Persona usually block functionalities and content (generally content or functionalities flagged as "adult" content )until the verification is complete or bypassed .If the user is verified as an adult ,they 'll be able to have total or most access to the content of that product or service. | | ''YOU (IF YOUR ARE A RESIDENT OF THE UNITED STATES) AND PERSONA IDENTITIES, INC., INCLUDING ITS PARENTS, SUBSIDIARIES, AFFILIATES, SUCCESSORS, AND ASSIGNS (“COMPANY”) AGREE THAT ANY PROCEEDINGS TO RESOLVE OR LITIGATE ANY DISPUTE WILL BE CONDUCTED SOLELY ON AN INDIVIDUAL BASIS, AND THAT NEITHER YOU NOR COMPANY WILL SEEK TO HAVE ANY DISPUTE HEARD AS A CLASS ACTION, A REPRESENTATIVE ACTION, A COLLECTIVE ACTION, A PRIVATE ATTORNEY-GENERAL ACTION, OR IN ANY PROCEEDING IN WHICH YOU OR COMPANY ACTS OR PROPOSES TO ACT IN A REPRESENTATIVE CAPACITY. YOU AND COMPANY FURTHER AGREE THAT NO PROCEEDING WILL BE JOINED, CONSOLIDATED, OR COMBINED WITH ANOTHER PROCEEDING WITHOUT THE PRIOR WRITTEN CONSENT OF YOU, COMPANY, AND ALL PARTIES TO ANY SUCH PROCEEDING. THIS CLASS ACTION WAIVER COVERS ALL DISPUTES BETWEEN YOU AND COMPANY AND ALSO INCLUDES ANY DISPUTE BETWEEN YOU AND ANY OFFICER, DIRECTOR, BOARD MEMBER, AGENT, EMPLOYEE, VENDOR, AFFILIATE, OR CLIENT OF COMPANY, IF COMPANY COULD BE LIABLE, DIRECTLY OR INDIRECTLY, FOR SUCH DISPUTE.'' | | | Their Privacy Policy contains [[forced arbitration]] that applies to users belonging to the United States: | | ''THE TERM “DISPUTE” SHALL BE INTERPRETED AS BROADLY AS PERMITTED UNDER THE LAW AND SHALL APPLY TO ALL PAST, PRESENT, AND FUTURE LEGAL DISPUTES AND LEGAL CLAIMS BETWEEN YOU AND COMPANY THAT ARE NOW IN EXISTENCE OR THAT MAY ARISE IN THE FUTURE, INCLUDING, BUT NOT LIMITED TO LEGAL DISPUTES OR LEGAL CLAIMS ARISING OUT OF OR RELATING IN ANY WAY TO THESE TERMS, THE COLLECTION OF FACIAL SCANS OR BIOMETRIC INFORMATION, THE PRIVACY POLICY OR COMPANY’S SERVICES; YOUR RELATIONSHIP WITH COMPANY; YOUR USE OF ANY COMPANY PRODUCT OR SERVICE; COMPANY’S CONDUCT; AND ANY FEDERAL, STATE, OR LOCAL STATUTE, LAW, RULE, REGULATION OR ORDINANCE APPLICABLE TO THE RELATIONSHIP BETWEEN YOU AND COMPANY AS TO WHICH A COURT WOULD BE AUTHORIZED BY LAW TO GRANT RELIEF IF THE CLAIM WERE SUCCESSFUL (“DISPUTE” OR “DISPUTES”).'' | | | <blockquote>YOU (IF YOUR ARE A RESIDENT OF THEUNITED STATES) ANDPERSONA IDENTITIES ,INC., INCLUDING ITS PARENTS, SUBSIDIARIES, AFFILIATES, SUCCESSORS , ANDASSIGNS (“COMPANY”) AGREE THATANY PROCEEDINGS TO RESOLVE ORLITIGATE ANY DISPUTE WILL BE CONDUCTED SOLELY ON AN INDIVIDUAL BASIS, AND THATNEITHER YOU NOR COMPANY WILL SEEK TO HAVE ANY DISPUTE HEARD AS A CLASS ACTION ,A REPRESENTATIVE ACTION, A COLLECTIVE ACTION, A PRIVATE ATTORNEY-GENERAL ACTION , OR IN ANYPROCEEDING IN WHICH YOU OR COMPANY ACTS OR PROPOSES TOACT IN A REPRESENTATIVE CAPACITY. YOU AND COMPANY FURTHER AGREE THAT NO PROCEEDING WILL BE JOINED ,CONSOLIDATED , ORCOMBINED WITHANOTHER PROCEEDING WITHOUT THE PRIOR WRITTEN CONSENT OFYOU, COMPANY, AND ALL PARTIES TO ANYSUCH PROCEEDING. THIS CLASS ACTION WAIVER COVERS ALL DISPUTES BETWEEN YOU AND COMPANYAND ALSO INCLUDES ANY DISPUTE BETWEEN YOU AND ANYOFFICER ,DIRECTOR ,BOARD MEMBER, AGENT ,EMPLOYEE ,VENDOR, AFFILIATE , ORCLIENT OF COMPANY~~,~~ IFCOMPANY COULD BE LIABLE, DIRECTLY ORINDIRECTLY, FOR SUCH DISPUTE .<br /><br /> | | </blockquote><ref name="pp" /> | | | THE TERM “DISPUTE” SHALL BE INTERPRETED AS BROADLY AS PERMITTED UNDER THE LAW AND SHALL APPLY TO ALL PAST, PRESENT, AND FUTURE LEGAL DISPUTES AND LEGAL CLAIMS BETWEEN YOU AND COMPANY THAT ARE NOW IN EXISTENCE OR THAT MAY ARISE IN THE FUTURE, INCLUDING, BUT NOT LIMITED TO LEGAL DISPUTES OR LEGAL CLAIMS ARISING OUT OF OR RELATING IN ANY WAY TO THESE TERMS, THE COLLECTION OF FACIAL SCANS OR BIOMETRIC INFORMATION, THE PRIVACY POLICY OR COMPANY’S SERVICES; YOUR RELATIONSHIP WITH COMPANY; YOUR USE OF ANY COMPANY PRODUCT OR SERVICE; COMPANY’S CONDUCT; AND ANY FEDERAL, STATE, OR LOCAL STATUTE, LAW, RULE, REGULATION OR ORDINANCE APPLICABLE TO THE RELATIONSHIP BETWEEN YOU AND COMPANY AS TO WHICH A COURT WOULD BE AUTHORIZED BY LAW TO GRANT RELIEF IF THE CLAIM WERE SUCCESSFUL (“DISPUTE” OR “DISPUTES”).<ref name=" :0">{{Cite web |author= Persona~~|date=2026-04~~ -09 |title=Privacy Policy |url=https://withpersona.com/legal/ privacy-policy~~|url~~ -status=live |archive -url=https://web .archive.org/web/20260710223512/https://withpersona.com/legal/privacy-policy |archive-date=2026-07-10 |access-date =2026-07-15 |website= Persona~~}}~~ </ ref~~><~~ /blockquote > | | [[File:Persona-privacy-policy-class-action-waiver.png|thumb|center|upright=2.0|Persona's privacy policy says US residents agree that any proceedings to resolve a dispute will be conducted ''SOLELY ON AN INDIVIDUAL BASIS'' and defines a dispute to include ''THE COLLECTION OF FACIAL SCANS OR BIOMETRIC INFORMATION''.<ref name="pp" />]] | | | ===User privacy=== | | ===User privacy=== | | | User data maybe retained up tothree years ,and can includean arguably [[Persona~~#User~~ DataCollected|excessive amount ]]of personally identifiable information. | | Persona's privacy policy, last updated April 9, 2026, says it permanently destroys ID & selfie scan data when identity verification is complete or within three years of a user's last interaction, subject to the customer's retention period & unless law or legal process requires Persona to keep it.<ref name="pp" /> For age checks, the policy says Persona's default setting is to delete all personal data, including age estimation & identity scan data, as soon as processing is complete & an outcome has been determined.<ref name="pp" /> Customers may direct Persona to keep certain data, which may include identity scan data, for longer periods when necessary to detect, investigate or prevent suspicious or fraudulent activity, as disclosed to the user when they consent.<ref name="pp" /> Persona wrote in June 2026 that Trail of Bits, a security firm it worked with, confirmed a hard-coded three-year maximum limit for retention in its code.<ref name="tob">{{Cite web |last=Song |first=Rick |title=An independent code review of Persona’s data practices |url=https://withpersona.com/blog/independent-code-review-persona-data-practices/ |date=2026-06-22 |website=Persona |access-date=2026-09-24}}</ref> | | | | | [[File:Persona-privacy-policy-id-selfie-retention.png|thumb|center|upright=2.6|Persona's privacy policy says that, subject to the customer's retention period, it will permanently destroy ID and Selfie Scan Data upon completion of identity verification services or ''within three years of your last interaction with Persona'', unless law or legal process requires it to keep the data.<ref name="pp" />]] | | | ===Business model=== | | ===Business model=== | | | Persona provides its services tovarious online platforms that may seek a means ofidentity and/or verification for one reason or another ,including social media companies like [[LinkedIn#Account Verification |LinkedIn]] ,communication providers like [[Discord#Discord 'sconnections toPalantir |Discord]] ,or online gaming platforms . | | Rick Song & Charles Yeh started Persona in 2018, & the company is headquartered in San Francisco.<ref name="prn-seriesd">{{Cite web |title=Persona raises $200M at $2B valuation to build the verified identity layer for an agentic AI world |url=https://www.prnewswire.com/news-releases/persona-raises-200m-at-2b-valuation-to-build-the-verified-identity-layer-for-an-agentic-ai-world-302442649.html |date=2025-04-30 |website=PR Newswire |publisher=Persona |archive-url=http://web.archive.org/web/20260918092703/https://www.prnewswire.com/news-releases/persona-raises-200m-at-2b-valuation-to-build-the-verified-identity-layer-for-an-agentic-ai-world-302442649.html |archive-date=2026-09-18 |access-date=2026-09-24}}</ref><ref name="tob" /><ref name="firstround">{{Cite web |title=From reluctant founder to $2B valuation: The story of Persona | Rick Song (Co-founder and CEO) |url=https://review.firstround.com/podcast/from-reluctant-founder-to-2b-valuation-the-story-of-persona-rick-song-co-founder-and-ceo/ |website=First Round Review |archive-url=http://web.archive.org/web/20260924192952/https://review.firstround.com/podcast/from-reluctant-founder-to-2b-valuation-the-story-of-persona-rick-song-co-founder-and-ceo/ |archive-date=2026-09-24 |access-date=2026-09-24}}</ref> Song is CEO,<ref name="tob" /> & Yeh, his co-founder, was chief technology officer as of November 2023.<ref name="firstround" /><ref name="visa">{{Cite web |title=Ask a fintech founder: Rick Song and Charles Yeh, Persona |url=https://corporate.visa.com/en/sites/visa-perspectives/innovation/ask-a-fintech-founder-persona.html |date=2023-11-01 |website=Visa |archive-url=http://web.archive.org/web/20260924192951/https://corporate.visa.com/en/sites/visa-perspectives/innovation/ask-a-fintech-founder-persona.html |archive-date=2026-09-24 |access-date=2026-09-24}}</ref> An Illinois appeals court described Persona Identities, Inc. as ''a software company that provides businesses automated identity verification services''.<ref name="wash" /> Persona's privacy policy says users provide data to Persona at the direction of those businesses, which it calls customers.<ref name="pp" /> | | | | | Persona's October 7, 2025 blog post announced Authorized status at the Low Impact level under the Federal Risk and Authorization Management Program (FedRAMP),<ref name="fedramp-blog" /><ref name="gsa-fedramp">{{Cite web |title=FedRAMP |url=https://www.gsa.gov/technology/government-it-initiatives/fedramp |website=U.S. General Services Administration |access-date=2026-09-24}}</ref> & an April 2026 update to the post says Persona for Government received FedRAMP Moderate Authorized status through the 20x pilot program on April 10, 2026.<ref name="fedramp-blog">{{Cite web |last=Chang |first=Timothy |title=Persona’s FedRAMP® Authorized status expands fraud prevention and identity verification options for federal agencies |url=https://withpersona.com/blog/personas-fedramp-status/ |date=2025-10-07 |website=Persona |access-date=2026-09-24}}</ref> |

|  | ===Market control=== |  | ===Market control=== | 
|  | {{Incomplete section}} |  | {{Incomplete section}} |

| | | | In the April 2025 post announcing its Series D, Song wrote that Persona had processed more than 300 million verifications in 2024 & doubled its revenue & customer count year over year.<ref name="blog-seriesd">{{Cite web |last=Song |first=Rick |title=Announcing Persona’s $200M Series D |url=https://withpersona.com/blog/series-d/ |date=2025-04-30 |website=Persona |access-date=2026-09-24}}</ref> The $200 million round valued the company at $2 billion.<ref name="prn-seriesd" /> |

|  | ==Privacy Concerns== |  | ==Privacy Concerns== | 
|  | ===User Data Collected=== |  | ===User Data Collected=== |

| | Concerns have been raised by consumers regarding theextensive amount of dataPersona collects onusers inorder tofacilitate identity verification. Thecompany 's privacypolicy lists thefollowing data points as collected items .<ref name=":0 " /> | | ====User-Provided Data==== | | | | | For identity verification, Persona's privacy policy lists: | | | | | <blockquote> | | | | | ''Depending on the method selected, you may be asked to provide only a subset of the following information:'' | | | | | *''Name and contact information, including name, email address, address, and phone number;'' | | | | | *''Demographic data, including birthdate and age;'' | | | | | *''Files you upload, such as tax forms and utility bills;'' | | | | | *''Government documents, barcodes, and identifiers, such as a passport, driver’s license or Social Security Number;'' | | | | | *''Audio, Video, and Photos of you, namely from the selfie or video you provide and from your government identification document; and'' | | | | | *''Biometric Data, only with your express consent, including a scan of your facial geometry based on the photos or video you provide. For more information about Biometric Data, see the Facial Scan and Biometrics Information section below.'' |

|  |  |  | </blockquote><ref name="pp" /> | 
|  |  |  | ====Additional Data from Customer and/or Third Parties==== |

| | | | The same section of the policy continues: | | | | | <blockquote> | | | | | ''We may also collect the following information from you, our customer, or third parties to determine and provide the appropriate identity verification method for your jurisdiction and to support compliance with applicable laws and regulations:'' | | | | | *''Current and previous name and contact information, including name, email address, address, and phone number;'' | | | | | *''Demographic data, including birthdate and age, gender, marital status, and similar demographic details;'' | | | | | *''Government documents, barcodes, and identifiers, such as drivers license and Social Security Numbers;'' | | | | | *''Device information, including IP address, device type, your device’s operating system, browser, cookie and device identifiers, and other software including type, version, language, settings, and configuration;'' | | | | | *''Account information, such as details about your account with our customer or other third parties;'' | | | | | *''Publicly available data, including data from governmental public records, the public internet and social media;'' | | | | | *''Geolocation data as we may infer your general geographic location (such as city, state, and country) based on your IP address. We do not collect precise geolocation data;'' | | | | | *''Wireless Device Data, which consists of information about your account and wireless device, if available. To assist our customers in meeting business operations needs and to perform certain services and functions, you authorize your wireless carrier to use or disclose information about your account and your wireless device, if available, to us or our service provider for the duration of your business relationship, solely to help them identify you or your wireless device and to prevent fraud; and'' | | | | | *''Additional Identity Data: We may verify personal data about you with our network of trusted third-party data sources, including the following: publicly available sources (such as open government databases), government and national ID registries, consumer credit bureaus, utility companies, mobile network providers and postal address databases. The types of this “Additional Identity Data” we obtain from these sources will vary depending on the verification checks available in the particular country. The purpose of the verification is never identified and your information is not sold to these third-party data sources. We also use service providers to determine your device’s location based on its IP address and to generate device identifiers.'' |

|  |  |  | </blockquote><ref name="pp" /> | 
|  |  |  | ===Connection to Peter Thiel=== |

| | | | Founders Fund led Persona's $150 million Series C in September 2021<ref name="prn-seriesc">{{Cite web |title=Persona Closes $150 Million Round Led by Founders Fund To Scale the World's First Trusted Identity Infrastructure |url=https://www.prnewswire.com/news-releases/persona-closes-150-million-round-led-by-founders-fund-to-scale-the-worlds-first-trusted-identity-infrastructure-301377506.html |date=2021-09-15 |website=PR Newswire |publisher=Persona |archive-url=http://web.archive.org/web/20260401151144/https://www.prnewswire.com/news-releases/persona-closes-150-million-round-led-by-founders-fund-to-scale-the-worlds-first-trusted-identity-infrastructure-301377506.html |archive-date=2026-04-01 |access-date=2026-09-24}}</ref> & co-led its $200 million Series D with Ribbit Capital in April 2025.<ref name="prn-seriesd" /> PC Gamer described the lead investor in Persona's most recent funding rounds as a venture fund ''co-founded and directed by'' Peter Thiel,<ref name="pcgamer">{{Cite web |last=Edser |first=Andy |title=Security researchers claim Persona, the provider behind Discord's UK age verification 'experiment', performs '269 individual verification checks' on user data, including those for terrorism and espionage |url=https://www.pcgamer.com/software/security/security-researchers-claim-persona-the-provider-behind-discords-uk-age-verification-experiment-performs-269-individual-verification-checks-on-user-data-including-those-for-terrorism-and-espionage/ |date=2026-02-20 |website=PC Gamer |archive-url=http://web.archive.org/web/20260901020650/https://www.pcgamer.com/software/security/security-researchers-claim-persona-the-provider-behind-discords-uk-age-verification-experiment-performs-269-individual-verification-checks-on-user-data-including-those-for-terrorism-and-espionage/ |archive-date=2026-09-01 |access-date=2026-09-24}}</ref> & the Associated Press reported that Founders Fund is run by Thiel,<ref name="ap">{{Cite web |last=Huamani |first=Kaitlyn |title=Discord delays global age verification rollout after criticism |url=https://apnews.com/article/discord-global-age-verification-privacy-f508653aad57f9f1b45175acee1ebcde |date=2026-02-24 |website=Associated Press |archive-url=http://web.archive.org/web/20260830224030/https://apnews.com/article/discord-global-age-verification-privacy-f508653aad57f9f1b45175acee1ebcde |archive-date=2026-08-30 |access-date=2026-09-24}}</ref> who co-founded [[Palantir|Palantir Technologies]] & is a partner at Founders Fund.<ref name="ff-thiel">{{Cite web |title=Peter Thiel |url=https://foundersfund.com/team/peter-thiel/ |website=Founders Fund |archive-url=http://web.archive.org/web/20260924192951/https://foundersfund.com/team/peter-thiel/ |archive-date=2026-09-24 |access-date=2026-09-24}}</ref> | | | | | The Open Rights Group said on February 15, 2026 that Roblox, Reddit & [[Discord]] users were compelled to use a biometric ID system backed by the Palantir co-founder.<ref name="org">{{Cite web |title=Roblox, Reddit and Discord users compelled to use biometric ID system backed by Palantir co-founder Peter Thiel |url=https://www.openrightsgroup.org/press-releases/roblox-reddit-and-discord-users-compelled-to-use-biometric-id-system-backed-by-palantir-co-founder-peter-thiel/ |date=2026-02-15 |website=Open Rights Group |archive-url=http://web.archive.org/web/20260821041751/https://www.openrightsgroup.org/press-releases/roblox-reddit-and-discord-users-compelled-to-use-biometric-id-system-backed-by-palantir-co-founder-peter-thiel/ |archive-date=2026-08-21 |access-date=2026-09-24}}</ref> James Baker, Big Tech Programme Manager at the Open Rights Group, said in the group's press release: | | | | | <blockquote>''People are worried, and angry, about having to hand over biometric scans of their face to overseas companies just to access online platforms.''</blockquote><ref name="org" /> | | | ====User -Provided Data=== = | | Persona chief operating officer Christie Kim told Ars Technica, in remarks quoted by Biometric Update, which publishes news about the global biometrics market,<ref name="bu-about">{{Cite web |title=About Us |url=https://www.biometricupdate.com/about-us |website=Biometric Update |access-date=2026-09-24}}</ref> that Thiel is an investor with no role in the company's operations: | | | <blockquote>You may directlyprovide : | | <blockquote>''He is not on our board, does not advise us, has no role in our operations or decision-making, and is not directly involved with Persona in any way. Persona and Palantir share no board members and have no business relationship with each other.''</blockquote><ref name="biometricupdate">{{Cite web |last=McConvey |first=Joel R. |title=Persona pushes back against fears its age assurance tech isn’t secure |url=https://www.biometricupdate.com/202602/persona-pushes-back-against-fears-its-age-assurance-tech-isnt-secure |date=2026-02-23 |website=Biometric Update |archive-url=http://web.archive.org/web/20260721103853/https://www.biometricupdate.com/202602/persona-pushes-back-against-fears-its-age-assurance-tech-isnt-secure |archive-date=2026-07-21 |access-date=2026-09-24}}</ref> | | | *Name and contact information, including name, email address, address, and phone number; | | ==Incidents== | | | *Demographic data, including birthdate and age; | | This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the [[:Category:{{FULLPAGENAME}}|{{PAGENAME}} category]]. | | | *Files you upload ,such as tax forms and utility bills; | | ===DoorDash driver biometric privacy lawsuit=== | | | | | Charles Washington & Katie Sims registered to become DoorDash delivery drivers in 2021, submitting selfies & photographs of their driver's license cards, which DoorDash authenticated with Persona's identity verification software.<ref name="wash" /> They sued Persona in late 2021 under the Biometric Information Privacy Act, in a proposed class action alleging that Persona possessed & profited from their biometric information without publicly disclosing a retention & destruction policy.<ref name="wash" /> Persona moved to [[forced arbitration|compel arbitration]] under DoorDash's contract with the drivers, claiming beneficiary status, & the circuit court granted the motion.<ref name="wash" /> On August 13, 2024, the Appellate Court of Illinois, Third District, reversed that order, holding that ''Persona has no legitimate basis to compel plaintiffs’ claims to arbitration''.<ref name="wash" /> On November 27, 2024, the Illinois Supreme Court denied Persona's petition for leave to appeal (No. 131059).<ref name="ilsc-lta">{{Cite web |title=Leave to Appeal Docket, November 27, 2024 |url=https://ilcourtsaudio.blob.core.windows.net/antilles-resources/resources/7bec52c0-9ce2-40ef-98cf-120a8a71814c/November%2027,%202024.pdf |date=2024-11-27 |website=Illinois Courts |publisher=Supreme Court of Illinois |access-date=2026-09-24}}</ref> | | | *Government documents ,barcodes ,and identifiers ,such as driver 's license and Social Security Number; and | | [[File:Persona-Washington-ILSC-leave-to-appeal-denied.png|thumb|center|upright=2.8|The leave to appeal docket entry for No. 131059, Charles Washington et al. v. Persona Identities, Inc., from Third District case 3-24-0210, reads ''Petition for Leave to Appeal Denied''.<ref name="ilsc-lta" />]] | | | *Audio ,Video ,and Photos ofyou ,namely from theselfie orvideo you provide and from your government identification document .<ref name=":0 " /></blockquote > | | ===Sonder rental guest biometric privacy class action=== | | | | | David Freifeld, an Illinois resident, filed a federal class action against Sonder Holdings & Persona Identities in the Northern District of Illinois on June 28, 2024.<ref name="freifeld" /><ref name="freifeld-docket" /> His complaint says he booked a Sonder-managed rental, The Hillsboro in Hillsboro Beach, Florida, through Expedia in late May 2024, & was then asked for an image of his driver's license.<ref name="freifeld" /> It alleges that Persona, as Sonder's contractor, captured & stored the face geometry from the license photo, compared it to him at check-in, & gave him no disclosure about how the data would be used, stored or retained.<ref name="freifeld" /> The complaint claims Sonder & Persona violated 740 ILCS 14/15(b) by failing to obtain informed written consent before obtaining biometric identifiers & information.<ref name="freifeld" /> | | | ====Additional Data fromCustomer and /or Third Parties=== = | | The court denied Persona's motion to dismiss on March 11, 2026.<ref name="freifeld-64" /><ref name="freifeld-docket" /> On March 27, 2026, Persona asked the court to certify an interlocutory appeal & stay the case, identifying this as the controlling question of law: | | | | | <blockquote>''Whether a company whose business is authenticating the identity of customers conducting financial and nonfinancial transactions qualifies as a financial institution or an affiliate of a financial institution that is subject to Title V of the federal Gramm-Leach-Bliley Act of 1999 and the rules promulgated thereunder (“GLBA”), and is therefore exempt from the Illinois Biometric Information Privacy Act (“BIPA”), 740 ILCS 14/1 et seq.''</blockquote><ref name="freifeld-64" /> | | | <blockquote > | | ===Roblox facial age estimation errors=== | | | | | Roblox began requiring users in the U.S. to complete an age check before chatting on January 7, 2026, & said the requirement would roll out to all regions where chat is available over the next week.<ref name="roblox-ir" /> Its release names Persona as the vendor that processes Facial Age Estimation images & videos, & says chat is not accessible until an age check is complete.<ref name="roblox-ir" /> | | | *Current and previous nameand contact information ,including name~~, email address, address, and phone number;~~ | | WIRED reported that the system was identifying children as adults & adults as children.<ref name="wired">{{Cite web |last=Gilbert |first=David |title=Roblox’s AI-Powered Age Verification Is a Complete Mess |url=https://www.wired.com/story/robloxs-ai-powered-age-verification-is-a-complete-mess/ |date=2026-01-13 |website=Wired |archive-url=http://web.archive.org/web/20260819122915/https://www.wired.com/story/robloxs-ai-powered-age-verification-is-a-complete-mess/ |archive-date=2026-08-19 |access-date=2026-09-24}}</ref> The magazine also reported that users verified as under 9 could chat only with players up to age 13.<ref name="wired" /> It quoted one developer who wrote that the change was ''only harming your core userbase instead of providing any safety''.<ref name="wired" /> The magazine found eBay listings offering age-verified accounts for minors as young as 9 for as little as $4, which eBay said it was removing after WIRED flagged them.<ref name="wired" /> WIRED also described a widely shared clip in which a boy who had drawn wrinkles & stubble on his face with black marker received a 21+ age rating.<ref name="wired" /> | | | *Demographic data ,including birthdate and age~~, gender, marital status, and similar demographic details;~~ | | Roblox addressed some of the criticism in a January 9, 2026 update on its developer forum, which WIRED quoted: | | | | | <blockquote>''We are aware of instances where parents age check on behalf of their children leading to kids being aged to 21+.''</blockquote><ref name="roblox-devforum">{{Cite web |title=Age Check to Chat Update & Fast Follow Roadmap |url=https://devforum.roblox.com/t/age-check-to-chat-update-fast-follow-roadmap/4238626 |date=2026-01-09 |website=Roblox Developer Forum |publisher=Roblox |access-date=2026-09-24}}</ref><ref name="wired" /> | | | *Government documents ,barcodes , andidentifiers, such as drivers license andSocial Security Numbers; | | ===Discord UK age verification test=== | | | | | Discord's chief technology officer & co-founder, Stanislav Vishnevskiy,<ref name="ap" /> wrote on Discord's blog on February 24, 2026 that Discord ran a limited test with Persona in the UK only in January & decided not to move forward after completing it.<ref name="discord-blog">{{Cite web |last=Vishnevskiy |first=Stanislav |title=Getting Global Age Assurance Right: What We Got Wrong and What's Changing |url=https://discord.com/blog/getting-global-age-assurance-right-what-we-got-wrong-and-whats-changing |date=2026-02-24 |website=Discord |access-date=2026-09-24}}</ref> | | | *Device information, including IP address, device type , yourdevice’s operating system ,browser, cookie and device identifiers, and other software including type, version, language, settings ,and configuration; | | Discord's age assurance help page told UK users in February 2026: | | | | | <blockquote>''If you're located in the UK, you may be part of an experiment where your information will be processed by an age-assurance vendor, Persona. The information you submit will be temporarily stored for up to 7 days, then deleted.''</blockquote><ref name="discord-support">{{Cite web |title=How to Complete Age Assurance on Discord |url=https://support.discord.com/hc/en-us/articles/30326565624343-How-to-Complete-Age-Assurance-on-Discord |website=Discord |archive-url=https://web.archive.org/web/20260212201755/https://support.discord.com/hc/en-us/articles/30326565624343-How-to-Complete-Age-Assurance-on-Discord |archive-date=2026-02-12 |url-status=dead |access-date=2026-09-24}}</ref> | | | *Account information ,such as details about your account with our Customer or other third parties; | | Vishnevskiy wrote that Discord's new bar for facial age estimation requires it to run entirely on-device, & that ''Persona did not meet that bar''.<ref name="discord-blog" /> The same post said all test data was deleted after verification was completed.<ref name="discord-blog" /> Persona & Discord both told Fortune their partnership lasted less than a month & had ended before Persona's front-end files were found online.<ref name="fortune">{{Cite web |last=Gioino |first=Catherina |title=Discord distances itself from Peter Thiel-backed verification software after its code was found on a Google Cloud endpoint |url=https://fortune.com/2026/02/24/discord-peter-thiel-backed-persona-identity-verification-breach/ |date=2026-02-24 |website=Fortune |access-date=2026-09-24}}</ref> The Associated Press reported that Discord distanced itself from Persona after the relationship became the subject of online criticism.<ref name="ap" /> | | | *Publicly available data ,including data from governmental public records~~,~~ thepublic internet and social media; | | ===Source map exposure on withpersona-gov.com test subdomain=== | | | | | On February 16, 2026, security researchers @vmfunc, @MDLcsgo & @DziurwaF published findings about frontend source maps, files that map compressed website code back to its readable original, exposed on a non-production subdomain under withpersona-gov.com, according to Persona's post-incident review.<ref name="pir">{{Cite web |last=Harris |first=Neal |title=Post-incident review: Source map exposure on non-production subdomain |url=https://withpersona.com/blog/post-incident-review-source-map-exposure-non-production-subdomain |date=2026-02-24 |website=Persona |archive-url=http://web.archive.org/web/20260801021038/https://withpersona.com/blog/post-incident-review-source-map-exposure-non-production-subdomain/ |archive-date=2026-08-01 |access-date=2026-09-24}}</ref> Persona's timeline records that it disabled the onyx subdomain at 5:34 p.m. PST the same day.<ref name="pir" /> | | | *Geolocation data as we may infer your general geographic location (such as city ,state ,and country) based on your IP address; | | PC Gamer reported that the researchers described ''53 megabytes of unprotected source maps on a FedRAMP government endpoint''.<ref name="pcgamer" /> Malwarebytes reported that they found 2,456 accessible files.<ref name="malwarebytes">{{Cite web |last=Arntz |first=Pieter |title=Age verification vendor Persona left frontend exposed, researchers say |url=https://www.malwarebytes.com/blog/news/2026/02/age-verification-vendor-persona-left-frontend-exposed |date=2026-02-20 |website=Malwarebytes |archive-url=http://web.archive.org/web/20260924193428/https://www.malwarebytes.com/blog/news/2026/02/age-verification-vendor-persona-left-frontend-exposed |archive-date=2026-09-24 |access-date=2026-09-24}}</ref> | | | *Biometric Data ,only with your express consent , includinga scan of your facial geometry based on the photos or video you provide .For more information about Biometric Data ,see theFacial Scan andBiometrics Information section below .<ref name=":0 " /> </blockquote > | | According to the researchers, as relayed by Malwarebytes, the software can perform 269 distinct verification checks, run facial recognition against watchlists & politically exposed persons, & screen for adverse media across 14 categories, including terrorism & espionage.<ref name="malwarebytes" /> The cybersecurity news site Cybernews reported that Persona's platform had built-in functionality for filing direct reports to FinCEN, the US Treasury's financial intelligence unit, & to Canada's equivalent, FINTRAC.<ref name="cybernews">{{Cite web |last=Naprys |first=Ernestas |title=Firm that verifies mugshots for ChatGPT and Roblox feeds US surveillance apparatus with 269 distinct checks |url=https://cybernews.com/privacy/persona-leak-exposes-global-surveillance-capabilities/ |date=2026-02-19 |website=Cybernews |archive-url=http://web.archive.org/web/20260908060951/https://cybernews.com/privacy/persona-leak-exposes-global-surveillance-capabilities/ |archive-date=2026-09-08 |access-date=2026-09-24}}</ref> Persona wrote in June 2026 that its customers in financial services may file anti-money laundering reports to government agencies through its platform to comply with regulations.<ref name="tob" /> The cryptocurrency news site DL News<ref name="dlnews-home">{{Cite web |title=Markets, DeFi, Regulation and top cryptocurrency news |url=https://www.dlnews.com/ |website=DL News |access-date=2026-09-24}}</ref> summarized the researchers' findings as including an integration that ''lets operators monitor crypto addresses''.<ref name="dlnews">{{Cite web |last1=Craig |first1=T. |last2=Kelly |first2=L. |title=OpenAI KYC provider accused of sharing users’ crypto addresses with federal agencies |url=https://www.dlnews.com/articles/web3/openai-kyc-provider-persona-accused-of-sharing-users-crypto-addresses-with-fincen/ |date=2026-02-19 |website=DL News |archive-url=http://web.archive.org/web/20260924193708/https://www.dlnews.com/articles/web3/openai-kyc-provider-persona-accused-of-sharing-users-crypto-addresses-with-fincen/ |archive-date=2026-09-24 |access-date=2026-09-24}}</ref> | | | ===Connection to Peter Thiel=== | | Persona's post-incident review, published February 24, 2026, says the test deployment ran in a separate project isolated from its FedRAMP-validated environment, & that ''This entire domain has never had any federal customers and has zero customer data.''<ref name="pir" /> Persona told Malwarebytes in a March 13, 2026 update that ''No personal data was exposed.''<ref name="malwarebytes" /> It also said ''No Persona customer uses all the possible 269 checks.''<ref name="malwarebytes" /> | | | Privacy concerns have also been raised which address Persona'sties to Peter Thiel , aco -founder of thecontroversial data analytics company [[Palantir]] .{{Citation needed}} | | | | | ==Incidents== | | [[File:Persona-post-incident-review-withpersona-gov.png|thumb|center|upright=2.8|Persona's post-incident review says it maintains test environments under withpersona-gov.com and that the domain ''has never had any federal customers and has zero customer data''.<ref name="pir" />]] | | | This is alist ofall consumer-protection incidents this company is involved in.Any incidents notmentioned here can be found in the [[:Category: {{FULLPAGENAME}} |{{PAGENAME }}category]] . | | Song told Fortune the files were ''uncompressed files of a front end that’s already on every single person’s device'', & that the 269 checks are options Persona offers, not all of which a client would necessarily need.<ref name="fortune" /> DL News reported that Song, in emails he posted on X, said his firm did not work with any federal agency.<ref name="dlnews" /> Kim told Ars Technica, as quoted by Biometric Update, that potential government contracts Persona was working on were for workforce account security of government employees & did not include U.S. Immigration and Customs Enforcement (ICE)<ref name="ice-about">{{Cite web |title=Who We Are |url=https://www.ice.gov/about-ice |website=U.S. Immigration and Customs Enforcement |access-date=2026-09-24}}</ref> or any Department of Homeland Security agency.<ref name="biometricupdate" /> | | | ===AI-powered age verification leads to inaccurate age on Roblox (''January 2026'')=== | | Song wrote in a June 22, 2026 post about a code review by Trail of Bits: | | | Children were being identified as adults andvice versa on [[Roblox]] .<ref~~>{{Cite web |last=Gilbert |first=David |date=2026-01-13 |title=Roblox’s AI-Powered Age Verification Is a Complete Mess |url=https://www.wired.com/story/robloxs-ai-powered-age-verification-is-a-complete-mess/ |url-status=live |archive-url=https://web.archive.org/web/20260226005411/https://www.wired.com/story/robloxs-ai-powered-age-verification-is-a-complete-mess/ |archive-date=2026-02-26 |access-date=2026-02-20 |website~~ =Wired}}< /ref > Theage verification restricted who the users couldtalk to. This implementation was criticized as nothelping toaddress safety concerns, and harming the user experience .<ref~~>{{Cite web |date=2026-01-09 |title=Age Check to Chat Update & Fast Follow Roadmap |url~~ =https://devforum.roblox.com/t/age-check-to-chat-update-fast-follow-roadmap /4238626/5 |url-status=live |archive-url=http://web.archive.org/web/20260203031742/https://devforum.roblox.com/t/age-check-to-chat-update-fast-follow-roadmap/4238626/5 |archive-date=3 Feb 2026 |access-date=2026-01-20 |website=devforum.roblox.com}}</ref > | | <blockquote>''Trail of Bits went through our admin tools, login systems, and infrastructure and found no evidence of any channel or backdoor that would allow law enforcement into Persona or into your data.''</blockquote><ref name="tob" /> | | | | | The same post acknowledged that a company could hide something in a way its code would not reveal, & said Persona did not give Trail of Bits access to its customers' data.<ref name="tob" /> | | | ===User tracking and ties with the US government (''February 2026'') === | | ===DoorDash identity theft lawsuit=== | | | On 16 February 2026 , asecurity researcher known as Celeste published an article showing that Personawas building profiles onusers and sharing said profiles with the US government ,even having a flagging system to flag users that seemed suspicious. A code to track crypto-addresses was also found .<ref>{{Cite web |last =Celeste |date=2026 -02 -16 |title=the watchers: how openai ,the US government, and persona built an identity surveillance machine that files reports on you to the feds |url=https://vmfunc .re /blog /persona |url-status=live |archive-url=http: //web .archive .org/web/20260221231714/https://vmfunc .re/blog/persona |archive- date=2026-02 -21 |website=vmfunc.re}}</ref><ref>{{Cite web |last =Celeste |date=2026-02-24 |title=the watchers, pt .2: thecorrespondence |url=https://vmfunc.re/blog/persona-2 |url-status=live |archive-url=https://web.archive.org/web/20260225233304/https://vmfunc.re/blog/persona-2 |archive-date=2026-02-25 |access-date=2026-02 -26 |website=vmfunc.re }}</ref><!-- <- I can 't understand the technicals of the part 2 source, but it 's a part 2, so I assume it 's related -raster -- >Itwas also discovered that 269 different checks were used forverification, which included things like phone carrier queries and death record matching, and with theirprivacy policy hiding these checks under vague terms like "public government documents ".<ref>{{Cite web |date =2025 -12 -04 |title=Privacy Policy |url=https://withpersona .com/legal /privacy -policy -roblox |url -status=live |archive-url =https://web.archive.org/web/20260613045534/https://withpersona.com/legal/privacy-policy-roblox |archive -date=2026-06 -13 |website=Persona }}</ref> | | Sandra Dickson, a 71-year-old resident of Aberdeen, Washington, sued Checkr, DoorDash & Persona in the U.S. District Court for the Western District of Washington on July 13, 2026.<ref name="dickson">{{Cite web |title=Dickson v. Checkr, Inc., No. 3:26-cv-05774, Complaint |url=https://storage.courtlistener.com/recap/gov.uscourts.wawd.365555/gov.uscourts.wawd.365555.1.0.pdf |date=2026-07-13 |website=CourtListener |publisher=U.S. District Court for the Western District of Washington |access-date=2026-09-24}}</ref> Her original complaint alleges that an identity thief posing as her with a fake ID ''was able to bypass PERSONA’s identity verification system'' & worked for DoorDash in her name.<ref name="dickson" /> It says she then received nearly $60,000 in tax bills from the IRS based on the income the thief earned driving for DoorDash.<ref name="dickson" /> The original complaint brought a Washington State Consumer Protection Act claim against DoorDash & Persona & asked for an injunction requiring the two companies to overhaul their procedures to protect identity theft victims.<ref name="dickson" /> An amended complaint was filed on September 10, 2026.<ref name="dickson-docket">{{Cite web |title=Dickson v. Checkr Inc, 3:26-cv-05774 |url=https://www.courtlistener.com/docket/73611202/dickson-v-checkr-inc/ |website=CourtListener |access-date=2026-09-24}}</ref> | | | ==Products== | | ==Products== | | | *Identity Verification (2021) | | *Identity Verification<ref name="pp" /> | | | *Age Verification (2025) | | *Age Verification, which Persona's privacy policy calls age assurance, including selfie age estimation<ref name="pp" /> | | | | | *Risk & screening reports, including watchlist & adverse media screening, listed in the navigation of Persona's website<ref name="subprocessors">{{Cite web |title=Subprocessors |url=https://withpersona.com/legal/subprocessors |date=2026-08-22 |website=Persona |archive-url=http://web.archive.org/web/20260918101410/https://withpersona.com/legal/subprocessors/ |archive-date=2026-09-18 |access-date=2026-09-24}}</ref> | | | | | *Persona for Government<ref name="fedramp-blog" /> | | | ==Clients== | | ==Clients== | | | Persona provides their service to these companies and products:<ref>{{Cite web |title=Customer Success Stories and Case Studies |url=https://withpersona.com/customers |url-status=live |access-date=2026-02-28 |website=Persona}}</ref> <!-- < IA does not archive this properly (list of customers is missing and non-interactable) --> | | Companies and products that use or have used Persona, or that name it as a provider: |

|  | {\| class="wikitable sortable mw-collapsible mw-collapsed" |  | {\| class="wikitable sortable mw-collapsible mw-collapsed" | 
|  | \|+~~<!-- Some clients are missing from this list -->~~ |  | \|+ |

| | !'''Company/Product''' | | !'''Company/Product''' | | | !'''Used for''' | | !'''Used for''' | | | !Additional notes | | !Additional notes |

|  | \|- |  | \|- | 
|  | \|~~[[~~ Anthropic~~]]~~ (~~[[~~ Claude~~]]~~ ) |  | \|Anthropic (Claude) |

| | |Identity Verification | | |Identity Verification | | | |Since April 2026, Anthropicimplemented identity verificationto "prevent abuse ,enforce our usage policies and comply with legal obligations" when there are no current legislations in any country thatmandates AI companies to introduce IDverification . <ref>{{Cite web |last=Pirat_Nation |date =2026-04-17 |title=Anthropicnow requires new Claudeusers to verify their identity with a government-issued photo ID and a live selfie No law forcing AI companies like this todo full IDchecks. This appears to be Anthropic’s own ... |url=https://x .com/Pirat_Nation /status /2044960285510053929#m |url -status =live |archive-url=https://ghostarchive .org /archive /35kC7 |archive-date=2026-07 -15 |website =[[X Corp|X]] }}</ref> | | |Anthropic says it selected Persona as its verification partner & that users' ID & selfie are collected & held by Persona.<ref name="anthropic" /> The Register reported on April 16, 2026 that Anthropic may check ID before letting users access certain Claude features.<ref name="register">{{Cite web |last=Vigliarolo |first=Brandon |title=If you want into Anthropic's Claude club, you may have to show ID |url=https://www.theregister.com/software/2026/04/16/anthropic-starts-checking-id-for-some-claude-users/5224514 |date=2026-04-16 |website=The Register |archive-url=http://web.archive.org/web/20260913145419/https://www.theregister.com/software/2026/04/16/anthropic-starts-checking-id-for-some-claude-users/5224514 |archive-date=2026-09-13 |access-date=2026-09-24}}</ref> | | | |- | | |- | | | |Brex | | |BlockFi | | | | | | | | | | | | | | | | | | |Named by Persona as a customer in September 2021<ref name="prn-seriesc" /> | | | |- | | |- | | | |Carahsoft | | |Brex | | | | | | | | | | | | | | | | |- | | |Named by Persona as a customer in September 2021<ref name="prn-seriesc" /> | | | |Cashapp | | | | | |Identify Verification | | | | | |Used to verify an users face and government issued ID | | | | | |- | | |- | | | |Coursera | | |Coursera | | | | | | | | | | | | | |Named by Persona as a customer in September 2021<ref name="prn-seriesc" /> |

|  | \|- |  | \|- | 
|  | \|~~[[~~ Discord~~]]~~ |  | \|Discord |

| | |Age Verification | | |Age Verification | | | |Discord claimed they allegedly ceased partnership with Personaand that theusage of their service was for "experimental "purposes in the United Kingdom. | | |Tested Persona in the UK only in January 2026 & decided not to move forward<ref name="discord-blog" /> | | | |- | | |- | | | |DoorDash | | |DoorDash | | | | | | |Identity Verification | | | | | | |Used Persona's software to authenticate delivery drivers, who submitted selfies & driver's license photos, according to a 2024 Illinois appellate opinion.<ref name="wash" /> A 2026 lawsuit alleges that an identity thief with a fake ID bypassed Persona's identity verification system.<ref name="dickson" /> | | | |- | | | | | |Eaze | | | | | | | | | | | | | | |

|  | \|- |  | \|- | 
|  | \|~~[[Etsy]]~~ |  | \|Gusto |

| | | | | | | | | | | | | | |- | | | | | |Fire & Flower Holdings | | | | | | | | | | | | | | | | | |- | | | | | |First Republic | | | | | | | | | | | | | | | | | |- | | | | | |Grailed | | | | | | | | | | | | | | | | | | | | |Named by Persona as a customer in September 2021<ref name="prn-seriesc" /> | | | |- | | |- | | | |Handshake | | |Handshake | | | |Identity Verification | | |Identity Verification | | | | | | |Used during onboarding for the Handshake AI Fellowship<ref name="handshake">{{Cite web |title=Troubleshooting Persona identity verification |url=https://support.joinhandshake.com/hc/en-us/articles/37615946030359-Troubleshooting-Persona-identity-verification |website=Handshake Help Center |archive-url=http://web.archive.org/web/20260721103853/https://support.joinhandshake.com/hc/en-us/articles/37615946030359-Troubleshooting-Persona-identity-verification |archive-date=2026-07-21 |access-date=2026-09-24}}</ref> | | | |- | | |- | | | |Mercury | | |LinkedIn | | | | | | |Identity Verification | | | | | | |Available to members with a government-issued ID from supported countries<ref name="linkedin" /> |

|  | \|- |  | \|- | 
|  | \|~~[[LinkedIn]]~~ |  | \|OpenAI (ChatGPT) |

| | |Age Verification, User Verification | | |Age Verification | | | | | | |Adults placed in the teen experience by mistake can verify their age with Persona<ref name="openai-age" /> |

|  | \|- |  | \|- | 
|  | \|~~[[OpenAI]] ([[ChatGPT]])~~ |  | \|Reddit |

| | |Age Verification | | |Age Verification | | | |Users verified as adults allow themodels to generate explicit and sensitive content | | |Used by Reddit to comply with the UK Online Safety Act<ref name="bbc" /> |

|  | \|- |  | \|- | 
|  | \|[[~~Reddit~~ ]] |  | \|[[Robinhood Financial\|Robinhood]] |

| | |Age Verifiaction | | | | | | |Used byReddit to comply with the UK Online Safety Act | | |Named by Persona as a customer in September 2021<ref name="prn-seriesc" /> |

|  | \|- |  | \|- | 
|  | \|~~[[~~ Roblox~~]]~~ |  | \|Roblox |

| | |Age Verification | | |Age Verification | | | |Verification sets players ina certain age brackets according to theestimations or provided data .Unverified players are unable to chat with others .Feature launched globally onJan 7 2026 | | |Persona processes Facial Age Estimation images & videos; players who skip the age check cannot use chat. Launched in the U.S. on January 7, 2026<ref name="roblox-ir" /> | | | |- | | |- | | | |Serviap Global | | |Sonder | | | | | | | | | | | | | | | | | | |Named by Persona as a customer in September 2021<ref name="prn-seriesc" /> | | | |- | | |- | | | |Stifel Financial Corp | | |Square | | | | | | | | | | | | | | | | | | |Named by Persona as a customer in September 2021<ref name="prn-seriesc" /> | | | |- | | |- | | | |Swan Bitcoin | | |VRChat | | | | | | | | | | | | | | | |- | | | | | |[[ VRChat~~]]~~ | | | | | |Age Verification | | |Age Verification | | | |Users need tobe signed up to the " VRC+" subscription service in order to verify their age. After auser is age verified, they do not need an ongoing subscriptionin order to stay age verified. <ref~~>{{Cite web |date~~ =2025-01-28 |title=VRChat Age Verification |url=https://hello. vrchat~~.com/blog~~ /age-verification |url-status=live |archive-url=https://web.archive.org/web/20250129114821/https://hello.vrchat.com/blog/age-verification |archive-date=2025-01-29 |access-date=2026-06-29}}</ref > | | |Available to VRC+ subscribers; verification stays permanent after a subscription ends<ref name="vrchat" /> | | | |- | | |- | | | |Wealthsimple | | |Wealthsimple | | | | | | | | | | | | | | | |- | | | | | |WeTravel | | | | | | | | | | | | | | | | | |- | | | | | |Privacy.com | | | | | |Identity Verification | | |Identity Verification | | | | | | |Wealthsimple's privacy policy says it may use biometric ID verification providers, such as Persona, to confirm the authenticity of photo identification<ref name="wealthsimple">{{Cite web |title=Privacy Policy |url=https://www.wealthsimple.com/en-ca/legal/privacy |website=Wealthsimple |archive-url=http://web.archive.org/web/20260917142522/https://www.wealthsimple.com/en-ca/legal/privacy |archive-date=2026-09-17 |access-date=2026-09-24}}</ref> |

|  | \|} |  | \|} | 
|  | ==Third Parties== |  | ==Third Parties== |

| | These are third parties thatcan receive and use thedata provided by Persona: <ref>{{Cite web |author= |date=2026-02-16 |title=I Verified My LinkedIn Identity. Here 'sWhat I Actually Handed Over. |url=https://thelocalstack.eu/posts/linkedin-identity-verification- privacy~~/ |url-status=live |archive-url=https://web~~ .archive.org/web/20260514074900/https://thelocalstack.eu/posts/linkedin-identity-verification-privacy/ |archive-date=2026-05-14 |access-date=2026-02-24 |website =The Local Stack}}< /ref > | | Persona's subprocessor list, last updated August 22, 2026, names these third parties that may process customer personal data, & marks each as required or conditional depending on the services a customer chooses.<ref name="subprocessors" /> Persona's privacy policy says it does not use any personal data, including biometric data, for any AI or model training.<ref name="pp" /> | | | {| class="wikitable sortable mw-collapsible mw-collapsed" | | {| class="wikitable sortable mw-collapsible mw-collapsed" | | | |+ | | |+ | | | !'''Company''' | | !'''Company''' | | | !What is data used for | | !What is data used for | | | !Additional notes | | !Required or conditional |

|  | \|- |  | \|- | 
|  | \|~~[[~~ Anthropic~~]]~~ |  | \|Anthropic |

| | |Data Extraction and Analysis | | |Data Extraction and Analysis | | | |Data used to train AI models | | |Conditional |

|  | \|- |  | \|- | 
|  | \|~~[[OpenAI]]~~ |  | \|AWS |

| | |Data Extraction and Analysis | | |Infrastructure, Image Processing | | | |Data used to train AI models | | |Required | | | |- | | |- | | | |Groqcloud | | |ClickHouse, Inc. | | | |Data Extraction and Analysis | | |Database Services | | | |Data used to train AI models | | |Required | | | |- | | |- | | | |AWS | | |IBM Corporation (formerly Confluent, Inc.) | | | |Infrastructure, Image Processing | | |ETL Services | | | | | | |Required | | | |- | | |- | | | |Google Cloud Platform | | |DBT | | | |Infrastructure as Service | | |ETL Services | | | | | | |Required | | | |- | | |- | | | |Resistant AI | | |Elasticsearch Inc. | | | |Document Analysis | | |Search and Analytics Engine | | | | | | |Required | | | |- | | |- | | | |FingerprintJS | | |FingerprintJS | | | |Device Analysis | | |Device Analysis | | | | | | |Conditional | | | | | |- | | | | | |Google Cloud Platform | | | | | |Infrastructure as a Service | | | | | |Required | | | | | |- | | | | | |Groqcloud | | | | | |Data Extraction and Analysis | | | | | |Conditional | | | |- | | |- | | | |MongoDB | | |MongoDB | | | |Database Services | | |Database Services | | | | | | |Required | | | |- | | |- | | | |Snowflake | | |OpenAI | | | |Database Services | | |Data Extraction and Analysis | | | | | | |Conditional | | | |- | | |- | | | |Elasticsearch | | |Resistant AI | | | |Search and Analytics Engine | | |Document Analysis | | | | | | |Conditional | | | |- | | | | | |Confluent | | | | | |ETL Services | | | | | | | | | | | |- | | | | | |DBT | | | | | |ETL Services | | | | | | | | | | | |- | | |- | | | |Sigma Computing | | |Sigma Computing | | | |Data Analytics | | |Data Analytics | | | | | | |Required | | | |- | | |- | | | |Tableau | | |Snowflake | | | |Data Analytics | | |Database Services | | | | | | |Required | | | |- | | |- | | | |Stripe | | |Stripe | | | |Credit Card Processing | | |Credit Card Processing | | | | | | |Conditional | | | |- | | |- | | | |Twilio | | |Twilio | | | |Communication APIs (Phone, SMS) | | |Communication APIs (Phone Numbers, SMS) | | | | | | |Conditional | | | |- | | |- | | | |Persona Identities Canada | | |Persona Identities Canada Inc. | | | |Customer Support & Development | | |Customer Support & Development | | | | | | |Conditional |

|  | \|} |  | \|} | 
|  | ==See also== |  | ==See also== | 
|  | *[[Online Safety Act]] |  | *[[UK Online Safety Act\|Online Safety Act]] | 
|  | *[[Age Verification]] |  | *[[Age verification\|Age Verification]] | 
|  | *[[Discord / 5CA Data Breach]] |  | *[[Discord / 5CA Data Breach]] | 
|  | ==References== |  | ==References== | 
|  | {{reflist}} |  | {{reflist}} | 
|  | [[Category:{{PAGENAME}}]] |  | [[Category:{{PAGENAME}}]] |

Latest revision as of 22:34, 24 September 2026 #

Basic information
Founded 2018
Legal Structure
Industry Software
Also known as Persona Identities Inc.

| Official website | https://withpersona.com/ | Persona has been sued under the Illinois Biometric Information Privacy Act by DoorDash drivers & a short-term rental guest who say it stored scans of their faces.[1][2]Reddit in the UK,[3]Roblox,[4]OpenAI's ChatGPT,[5]LinkedIn<sup>[6]</sup> & Anthropic's Claude<sup>[7]</sup> send users to Persona's face & ID checks to verify their age or identity. Persona's privacy policy says US residents agree to resolve disputes with Persona solely on an individual basis, with no class actions, & defines disputes to include the collection of facial scans.<sup>[8]</sup> A federal court denied Persona's motion to dismiss the rental guest's lawsuit on March 11, 2026.[9][10]

Consumer impact summary #

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=1)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=1)]

User freedom

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=2)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=2)]

Reddit said that from July 14, 2025, Persona would perform age verification for its UK site, a measure Reddit introduced to comply with the UK's Online Safety Act.<sup>[11]</sup> Reddit requires UK users to confirm their age to access restricted content, & they confirm it through their Apple account on iOS or through Persona with a selfie or ID.[3]

Adults whom ChatGPT's age prediction places in its teen experience by mistake can have teen protections removed by verifying their age with Persona.<sup>[5]</sup> In Italy, OpenAI uses Persona for age verification while an account is active.[12]VRChat made age verification through Persona available to its VRC+ subscribers, & the verified status is permanent even after a subscription ends.[13]

The waiver in Persona's privacy policy reads:

YOU (IF YOUR ARE A RESIDENT OF THE UNITED STATES) AND PERSONA IDENTITIES, INC., INCLUDING ITS PARENTS, SUBSIDIARIES, AFFILIATES, SUCCESSORS, AND ASSIGNS (“COMPANY”) AGREE THAT ANY PROCEEDINGS TO RESOLVE OR LITIGATE ANY DISPUTE WILL BE CONDUCTED SOLELY ON AN INDIVIDUAL BASIS, AND THAT NEITHER YOU NOR COMPANY WILL SEEK TO HAVE ANY DISPUTE HEARD AS A CLASS ACTION, A REPRESENTATIVE ACTION, A COLLECTIVE ACTION, A PRIVATE ATTORNEY-GENERAL ACTION, OR IN ANY PROCEEDING IN WHICH YOU OR COMPANY ACTS OR PROPOSES TO ACT IN A REPRESENTATIVE CAPACITY. YOU AND COMPANY FURTHER AGREE THAT NO PROCEEDING WILL BE JOINED, CONSOLIDATED, OR COMBINED WITH ANOTHER PROCEEDING WITHOUT THE PRIOR WRITTEN CONSENT OF YOU, COMPANY, AND ALL PARTIES TO ANY SUCH PROCEEDING. THIS CLASS ACTION WAIVER COVERS ALL DISPUTES BETWEEN YOU AND COMPANY AND ALSO INCLUDES ANY DISPUTE BETWEEN YOU AND ANY OFFICER, DIRECTOR, BOARD MEMBER, AGENT, EMPLOYEE, VENDOR, AFFILIATE, OR CLIENT OF COMPANY, IF COMPANY COULD BE LIABLE, DIRECTLY OR INDIRECTLY, FOR SUCH DISPUTE.

THE TERM “DISPUTE” SHALL BE INTERPRETED AS BROADLY AS PERMITTED UNDER THE LAW AND SHALL APPLY TO ALL PAST, PRESENT, AND FUTURE LEGAL DISPUTES AND LEGAL CLAIMS BETWEEN YOU AND COMPANY THAT ARE NOW IN EXISTENCE OR THAT MAY ARISE IN THE FUTURE, INCLUDING, BUT NOT LIMITED TO LEGAL DISPUTES OR LEGAL CLAIMS ARISING OUT OF OR RELATING IN ANY WAY TO THESE TERMS, THE COLLECTION OF FACIAL SCANS OR BIOMETRIC INFORMATION, THE PRIVACY POLICY OR COMPANY’S SERVICES; YOUR RELATIONSHIP WITH COMPANY; YOUR USE OF ANY COMPANY PRODUCT OR SERVICE; COMPANY’S CONDUCT; AND ANY FEDERAL, STATE, OR LOCAL STATUTE, LAW, RULE, REGULATION OR ORDINANCE APPLICABLE TO THE RELATIONSHIP BETWEEN YOU AND COMPANY AS TO WHICH A COURT WOULD BE AUTHORIZED BY LAW TO GRANT RELIEF IF THE CLAIM WERE SUCCESSFUL (“DISPUTE” OR “DISPUTES”).

User privacy

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=3)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=3)]

Persona's privacy policy, last updated April 9, 2026, says it permanently destroys ID & selfie scan data when identity verification is complete or within three years of a user's last interaction, subject to the customer's retention period & unless law or legal process requires Persona to keep it.<sup>[8]</sup> For age checks, the policy says Persona's default setting is to delete all personal data, including age estimation & identity scan data, as soon as processing is complete & an outcome has been determined.<sup>[8]</sup> Customers may direct Persona to keep certain data, which may include identity scan data, for longer periods when necessary to detect, investigate or prevent suspicious or fraudulent activity, as disclosed to the user when they consent.<sup>[8]</sup> Persona wrote in June 2026 that Trail of Bits, a security firm it worked with, confirmed a hard-coded three-year maximum limit for retention in its code.[14]

Business model

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=4)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=4)]

Rick Song & Charles Yeh started Persona in 2018, & the company is headquartered in San Francisco.[15][14]<sup>[16]</sup> Song is CEO,<sup>[14]</sup> & Yeh, his co-founder, was chief technology officer as of November 2023.[16]<sup>[17]</sup> An Illinois appeals court described Persona Identities, Inc. as a software company that provides businesses automated identity verification services.<sup>[1]</sup> Persona's privacy policy says users provide data to Persona at the direction of those businesses, which it calls customers.[8]

Persona's October 7, 2025 blog post announced Authorized status at the Low Impact level under the Federal Risk and Authorization Management Program (FedRAMP),[18]<sup>[19]</sup> & an April 2026 update to the post says Persona for Government received FedRAMP Moderate Authorized status through the 20x pilot program on April 10, 2026.[18]

Market control

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=5)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=5)]

This section is incomplete. This notice can be deleted once all the placeholder text has been replaced.

In the April 2025 post announcing its Series D, Song wrote that Persona had processed more than 300 million verifications in 2024 & doubled its revenue & customer count year over year.<sup>[20]</sup> The $200 million round valued the company at $2 billion.[15]

Privacy Concerns #

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=6)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=6)]

User Data Collected

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=7)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=7)]

User-Provided Data

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=8)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=8)]

For identity verification, Persona's privacy policy lists:

Depending on the method selected, you may be asked to provide only a subset of the following information:

Name and contact information, including name, email address, address, and phone number; Demographic data, including birthdate and age; Files you upload, such as tax forms and utility bills; Government documents, barcodes, and identifiers, such as a passport, driver’s license or Social Security Number; Audio, Video, and Photos of you, namely from the selfie or video you provide and from your government identification document; and Biometric Data, only with your express consent, including a scan of your facial geometry based on the photos or video you provide. For more information about Biometric Data, see the Facial Scan and Biometrics Information section below.

Additional Data from Customer and/or Third Parties

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=9)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=9)]

The same section of the policy continues:

We may also collect the following information from you, our customer, or third parties to determine and provide the appropriate identity verification method for your jurisdiction and to support compliance with applicable laws and regulations:

Current and previous name and contact information, including name, email address, address, and phone number; Demographic data, including birthdate and age, gender, marital status, and similar demographic details; Government documents, barcodes, and identifiers, such as drivers license and Social Security Numbers; Device information, including IP address, device type, your device’s operating system, browser, cookie and device identifiers, and other software including type, version, language, settings, and configuration; Account information, such as details about your account with our customer or other third parties; Publicly available data, including data from governmental public records, the public internet and social media; Geolocation data as we may infer your general geographic location (such as city, state, and country) based on your IP address. We do not collect precise geolocation data; Wireless Device Data, which consists of information about your account and wireless device, if available. To assist our customers in meeting business operations needs and to perform certain services and functions, you authorize your wireless carrier to use or disclose information about your account and your wireless device, if available, to us or our service provider for the duration of your business relationship, solely to help them identify you or your wireless device and to prevent fraud; and Additional Identity Data: We may verify personal data about you with our network of trusted third-party data sources, including the following: publicly available sources (such as open government databases), government and national ID registries, consumer credit bureaus, utility companies, mobile network providers and postal address databases. The types of this “Additional Identity Data” we obtain from these sources will vary depending on the verification checks available in the particular country. The purpose of the verification is never identified and your information is not sold to these third-party data sources. We also use service providers to determine your device’s location based on its IP address and to generate device identifiers.

Connection to Peter Thiel

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=10)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=10)]

Founders Fund led Persona's $150 million Series C in September 2021<sup>[21]</sup> & co-led its $200 million Series D with Ribbit Capital in April 2025.<sup>[15]</sup> PC Gamer described the lead investor in Persona's most recent funding rounds as a venture fund co-founded and directed by Peter Thiel,<sup>[22]</sup> & the Associated Press reported that Founders Fund is run by Thiel,<sup>[23]</sup> who co-founded Palantir Technologies & is a partner at Founders Fund.[24]

The Open Rights Group said on February 15, 2026 that Roblox, Reddit & Discord users were compelled to use a biometric ID system backed by the Palantir co-founder.<sup>[25]</sup> James Baker, Big Tech Programme Manager at the Open Rights Group, said in the group's press release:

People are worried, and angry, about having to hand over biometric scans of their face to overseas companies just to access online platforms.

Persona chief operating officer Christie Kim told Ars Technica, in remarks quoted by Biometric Update, which publishes news about the global biometrics market,<sup>[26]</sup> that Thiel is an investor with no role in the company's operations:

He is not on our board, does not advise us, has no role in our operations or decision-making, and is not directly involved with Persona in any way. Persona and Palantir share no board members and have no business relationship with each other.

Incidents #

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=11)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=11)]

This is a list of all consumer-protection incidents this company is involved in. Any incidents not mentioned here can be found in the Persona category.

DoorDash driver biometric privacy lawsuit

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=12)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=12)]

Charles Washington & Katie Sims registered to become DoorDash delivery drivers in 2021, submitting selfies & photographs of their driver's license cards, which DoorDash authenticated with Persona's identity verification software.<sup>[1]</sup> They sued Persona in late 2021 under the Biometric Information Privacy Act, in a proposed class action alleging that Persona possessed & profited from their biometric information without publicly disclosing a retention & destruction policy.<sup>[1]</sup> Persona moved to compel arbitration under DoorDash's contract with the drivers, claiming beneficiary status, & the circuit court granted the motion.<sup>[1]</sup> On August 13, 2024, the Appellate Court of Illinois, Third District, reversed that order, holding that Persona has no legitimate basis to compel plaintiffs’ claims to arbitration.<sup>[1]</sup> On November 27, 2024, the Illinois Supreme Court denied Persona's petition for leave to appeal (No. 131059).[28]

Sonder rental guest biometric privacy class action

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=13)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=13)]

David Freifeld, an Illinois resident, filed a federal class action against Sonder Holdings & Persona Identities in the Northern District of Illinois on June 28, 2024.[2]<sup>[10]</sup> His complaint says he booked a Sonder-managed rental, The Hillsboro in Hillsboro Beach, Florida, through Expedia in late May 2024, & was then asked for an image of his driver's license.<sup>[2]</sup> It alleges that Persona, as Sonder's contractor, captured & stored the face geometry from the license photo, compared it to him at check-in, & gave him no disclosure about how the data would be used, stored or retained.<sup>[2]</sup> The complaint claims Sonder & Persona violated 740 ILCS 14/15(b) by failing to obtain informed written consent before obtaining biometric identifiers & information.[2]

The court denied Persona's motion to dismiss on March 11, 2026.[9]<sup>[10]</sup> On March 27, 2026, Persona asked the court to certify an interlocutory appeal & stay the case, identifying this as the controlling question of law:

Whether a company whose business is authenticating the identity of customers conducting financial and nonfinancial transactions qualifies as a financial institution or an affiliate of a financial institution that is subject to Title V of the federal Gramm-Leach-Bliley Act of 1999 and the rules promulgated thereunder (“GLBA”), and is therefore exempt from the Illinois Biometric Information Privacy Act (“BIPA”), 740 ILCS 14/1 et seq.

Roblox facial age estimation errors

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=14)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=14)]

Roblox began requiring users in the U.S. to complete an age check before chatting on January 7, 2026, & said the requirement would roll out to all regions where chat is available over the next week.<sup>[4]</sup> Its release names Persona as the vendor that processes Facial Age Estimation images & videos, & says chat is not accessible until an age check is complete.[4]

WIRED reported that the system was identifying children as adults & adults as children.<sup>[29]</sup> The magazine also reported that users verified as under 9 could chat only with players up to age 13.<sup>[29]</sup> It quoted one developer who wrote that the change was only harming your core userbase instead of providing any safety.<sup>[29]</sup> The magazine found eBay listings offering age-verified accounts for minors as young as 9 for as little as $4, which eBay said it was removing after WIRED flagged them.<sup>[29]</sup> WIRED also described a widely shared clip in which a boy who had drawn wrinkles & stubble on his face with black marker received a 21+ age rating.[29]

Roblox addressed some of the criticism in a January 9, 2026 update on its developer forum, which WIRED quoted:

We are aware of instances where parents age check on behalf of their children leading to kids being aged to 21+.

Discord UK age verification test

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=15)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=15)]

Discord's chief technology officer & co-founder, Stanislav Vishnevskiy,<sup>[23]</sup> wrote on Discord's blog on February 24, 2026 that Discord ran a limited test with Persona in the UK only in January & decided not to move forward after completing it.[31]

Discord's age assurance help page told UK users in February 2026:

If you're located in the UK, you may be part of an experiment where your information will be processed by an age-assurance vendor, Persona. The information you submit will be temporarily stored for up to 7 days, then deleted.

Vishnevskiy wrote that Discord's new bar for facial age estimation requires it to run entirely on-device, & that Persona did not meet that bar.<sup>[31]</sup> The same post said all test data was deleted after verification was completed.<sup>[31]</sup> Persona & Discord both told Fortune their partnership lasted less than a month & had ended before Persona's front-end files were found online.<sup>[33]</sup> The Associated Press reported that Discord distanced itself from Persona after the relationship became the subject of online criticism.[23]

Source map exposure on withpersona-gov.com test subdomain

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=16)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=16)]

On February 16, 2026, security researchers @vmfunc, @MDLcsgo & @DziurwaF published findings about frontend source maps, files that map compressed website code back to its readable original, exposed on a non-production subdomain under withpersona-gov.com, according to Persona's post-incident review.<sup>[34]</sup> Persona's timeline records that it disabled the onyx subdomain at 5:34 p.m. PST the same day.[34]

PC Gamer reported that the researchers described 53 megabytes of unprotected source maps on a FedRAMP government endpoint.<sup>[22]</sup> Malwarebytes reported that they found 2,456 accessible files.[35]

According to the researchers, as relayed by Malwarebytes, the software can perform 269 distinct verification checks, run facial recognition against watchlists & politically exposed persons, & screen for adverse media across 14 categories, including terrorism & espionage.<sup>[35]</sup> The cybersecurity news site Cybernews reported that Persona's platform had built-in functionality for filing direct reports to FinCEN, the US Treasury's financial intelligence unit, & to Canada's equivalent, FINTRAC.<sup>[36]</sup> Persona wrote in June 2026 that its customers in financial services may file anti-money laundering reports to government agencies through its platform to comply with regulations.<sup>[14]</sup> The cryptocurrency news site DL News<sup>[37]</sup> summarized the researchers' findings as including an integration that lets operators monitor crypto addresses.[38]

Persona's post-incident review, published February 24, 2026, says the test deployment ran in a separate project isolated from its FedRAMP-validated environment, & that This entire domain has never had any federal customers and has zero customer data.<sup>[34]</sup> Persona told Malwarebytes in a March 13, 2026 update that No personal data was exposed.<sup>[35]</sup> It also said No Persona customer uses all the possible 269 checks.[35]

Song told Fortune the files were uncompressed files of a front end that’s already on every single person’s device, & that the 269 checks are options Persona offers, not all of which a client would necessarily need.<sup>[33]</sup> DL News reported that Song, in emails he posted on X, said his firm did not work with any federal agency.<sup>[38]</sup> Kim told Ars Technica, as quoted by Biometric Update, that potential government contracts Persona was working on were for workforce account security of government employees & did not include U.S. Immigration and Customs Enforcement (ICE)<sup>[39]</sup> or any Department of Homeland Security agency.[27]

Song wrote in a June 22, 2026 post about a code review by Trail of Bits:

Trail of Bits went through our admin tools, login systems, and infrastructure and found no evidence of any channel or backdoor that would allow law enforcement into Persona or into your data.

The same post acknowledged that a company could hide something in a way its code would not reveal, & said Persona did not give Trail of Bits access to its customers' data.[14]

DoorDash identity theft lawsuit

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=17)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=17)]

Sandra Dickson, a 71-year-old resident of Aberdeen, Washington, sued Checkr, DoorDash & Persona in the U.S. District Court for the Western District of Washington on July 13, 2026.<sup>[40]</sup> Her original complaint alleges that an identity thief posing as her with a fake ID was able to bypass PERSONA’s identity verification system & worked for DoorDash in her name.<sup>[40]</sup> It says she then received nearly $60,000 in tax bills from the IRS based on the income the thief earned driving for DoorDash.<sup>[40]</sup> The original complaint brought a Washington State Consumer Protection Act claim against DoorDash & Persona & asked for an injunction requiring the two companies to overhaul their procedures to protect identity theft victims.<sup>[40]</sup> An amended complaint was filed on September 10, 2026.[41]

Products #

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=18)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=18)]

- Identity Verification<sup>[\[8\]](#cite_note-pp-8)</sup>
- Age Verification, which Persona's privacy policy calls age assurance, including selfie age estimation<sup>[\[8\]](#cite_note-pp-8)</sup>
- Risk & screening reports, including watchlist & adverse media screening, listed in the navigation of Persona's website<sup>[\[42\]](#cite_note-subprocessors-42)</sup>
- Persona for Government<sup>[\[18\]](#cite_note-fedramp-blog-18)</sup>

Clients #

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=19)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=19)]

Companies and products that use or have used Persona, or that name it as a provider:

Company/Product Used for Additional notes
Anthropic (Claude) Identity Verification Anthropic says it selected Persona as its verification partner & that users' ID & selfie are collected & held by Persona. <sup>[7]</sup> The Register reported on April 16, 2026 that Anthropic may check ID before letting users access certain Claude features.<sup>[43]</sup> 
| BlockFi |  | Named by Persona as a customer in September 2021 <sup>[\[21\]](#cite_note-prn-seriesc-21)</sup> | 
| Brex |  | Named by Persona as a customer in September 2021 <sup>[\[21\]](#cite_note-prn-seriesc-21)</sup> | 
| Coursera |  | Named by Persona as a customer in September 2021 <sup>[\[21\]](#cite_note-prn-seriesc-21)</sup> | 
| Discord | Age Verification | Tested Persona in the UK only in January 2026 & decided not to move forward <sup>[\[31\]](#cite_note-discord-blog-31)</sup> |

| DoorDash | Identity Verification | Used Persona's software to authenticate delivery drivers, who submitted selfies & driver's license photos, according to a 2024 Illinois appellate opinion. <sup>[1]</sup> A 2026 lawsuit alleges that an identity thief with a fake ID bypassed Persona's identity verification system.<sup>[40]</sup> |

| Gusto |  | Named by Persona as a customer in September 2021 <sup>[\[21\]](#cite_note-prn-seriesc-21)</sup> | 
| Handshake | Identity Verification | Used during onboarding for the Handshake AI Fellowship <sup>[\[44\]](#cite_note-handshake-44)</sup> | 
|  | Identity Verification | Available to members with a government-issued ID from supported countries <sup>[\[6\]](#cite_note-linkedin-6)</sup> | 
| OpenAI (ChatGPT) | Age Verification | Adults placed in the teen experience by mistake can verify their age with Persona <sup>[\[5\]](#cite_note-openai-age-5)</sup> | 
|  | Age Verification | Used by Reddit to comply with the UK Online Safety Act <sup>[\[11\]](#cite_note-bbc-11)</sup> | 
| [Robinhood](https://consumerrights.wiki/w/Robinhood_Financial) |  | Named by Persona as a customer in September 2021 <sup>[\[21\]](#cite_note-prn-seriesc-21)</sup> |

| Roblox | Age Verification | Persona processes Facial Age Estimation images & videos; players who skip the age check cannot use chat. Launched in the U.S. on January 7, 2026 <sup>[4]</sup> |

| Sonder |  | Named by Persona as a customer in September 2021 <sup>[\[21\]](#cite_note-prn-seriesc-21)</sup> | 
| Square |  | Named by Persona as a customer in September 2021 <sup>[\[21\]](#cite_note-prn-seriesc-21)</sup> | 
| VRChat | Age Verification | Available to VRC+ subscribers; verification stays permanent after a subscription ends <sup>[\[13\]](#cite_note-vrchat-13)</sup> |

| Wealthsimple | Identity Verification | Wealthsimple's privacy policy says it may use biometric ID verification providers, such as Persona, to confirm the authenticity of photo identification <sup>[45]</sup> |

Third Parties #

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=20)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=20)]

Persona's subprocessor list, last updated August 22, 2026, names these third parties that may process customer personal data, & marks each as required or conditional depending on the services a customer chooses.<sup>[42]</sup> Persona's privacy policy says it does not use any personal data, including biometric data, for any AI or model training.[8]

Company What is data used for Required or conditional
Anthropic Data Extraction and Analysis Conditional
AWS Infrastructure, Image Processing Required
ClickHouse, Inc. Database Services Required
IBM Corporation (formerly Confluent, Inc.) ETL Services Required
DBT ETL Services Required
Elasticsearch Inc. Search and Analytics Engine Required
FingerprintJS Device Analysis Conditional
Google Cloud Platform Infrastructure as a Service Required
Groqcloud Data Extraction and Analysis Conditional
MongoDB Database Services Required
OpenAI Data Extraction and Analysis Conditional
Resistant AI Document Analysis Conditional
Sigma Computing Data Analytics Required
Snowflake Database Services Required
Stripe Credit Card Processing Conditional
Twilio Communication APIs (Phone Numbers, SMS) Conditional
Persona Identities Canada Inc. Customer Support & Development Conditional

See also #

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=21)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=21)]

References #

[
[edit](https://consumerrights.wiki/index.php?title=Persona&veaction=edit§ion=22)|

[edit source](https://consumerrights.wiki/index.php?title=Persona&action=edit§ion=22)]
  1. ↑ <sup>1.0</sup><sup>1.1</sup><sup>1.2</sup><sup>1.3</sup><sup>1.4</sup><sup>1.5</sup><sup>1.6</sup>"Washington v. Persona Identities Inc (2024)" .FindLaw . Appellate Court of Illinois, Third District. 2024-08-13. Archived fromthe original on 2025-09-01. Retrieved 2026-09-24.
  2. ↑ <sup>2.0</sup><sup>2.1</sup><sup>2.2</sup><sup>2.3</sup><sup>2.4</sup>"Freifeld v. Sonder Holdings Inc., No. 1:24-cv-05459, Complaint" (PDF).CourtListener . U.S. District Court for the Northern District of Illinois. 2024-06-28. Retrieved 2026-09-24.
  3. ↑ <sup>3.0</sup><sup>3.1</sup>"United Kingdom: Online Safety Act" .Reddit Help . Archived fromthe original on 2026-05-30. Retrieved 2026-09-24.
  4. ↑ <sup>4.0</sup><sup>4.1</sup><sup>4.2</sup><sup>4.3</sup>"Roblox Requires Users Worldwide to Age-Check to Access Chat" .Roblox . 2026-01-07. Archived fromthe original on 2026-09-02. Retrieved 2026-09-24.
  5. ↑ <sup>5.0</sup><sup>5.1</sup><sup>5.2</sup>"Age prediction in ChatGPT" .OpenAI Help Center . Archived fromthe original on 2026-09-20. Retrieved 2026-09-24.
  6. ↑ <sup>6.0</sup><sup>6.1</sup>"Identity verification via Persona" .LinkedIn Help . Archived fromthe original on 2024-10-03. Retrieved 2026-09-24.
  7. ↑ <sup>7.0</sup><sup>7.1</sup>"Identity verification on Claude" .Claude Help Center . Anthropic. Archived fromthe original on 2026-09-23. Retrieved 2026-09-24.
  8. ↑ <sup>8.00</sup><sup>8.01</sup><sup>8.02</sup><sup>8.03</sup><sup>8.04</sup><sup>8.05</sup><sup>8.06</sup><sup>8.07</sup><sup>8.08</sup><sup>8.09</sup><sup>8.10</sup><sup>8.11</sup><sup>8.12</sup>"Processor Privacy Policy" .Persona . 2026-04-09. Archived fromthe original on 2026-09-09. Retrieved 2026-09-24.
  9. ↑ <sup>9.0</sup><sup>9.1</sup><sup>9.2</sup>"Freifeld v. Persona Identities Inc., No. 1:24-cv-05459, Defendant's Motion to Amend and Certify Order for Interlocutory Appeal and to Stay" (PDF).CourtListener . U.S. District Court for the Northern District of Illinois. 2026-03-27. Retrieved 2026-09-24.
  10. ↑ <sup>10.0</sup><sup>10.1</sup><sup>10.2</sup>"Freifeld v. Sonder Holdings Inc., 1:24-cv-05459" .CourtListener . Retrieved 2026-09-24.
  11. ↑ <sup>11.0</sup><sup>11.1</sup> Jordan, Dearbail (2025-07-14)."Reddit starts verifying ages of users in the UK" .BBC News . Archived fromthe original on 2026-09-24. Retrieved 2026-09-24.
  12. ↑"Why am I being asked to verify my age?" .OpenAI Help Center . Retrieved 2026-09-24.
  13. ↑ <sup>13.0</sup><sup>13.1</sup>"Age Verification Now Available for VRC+ Subscribers" .VRChat . 2025-01-28. Archived fromthe original on 2026-09-24. Retrieved 2026-09-24.
  14. ↑ <sup>14.0</sup><sup>14.1</sup><sup>14.2</sup><sup>14.3</sup><sup>14.4</sup><sup>14.5</sup> Song, Rick (2026-06-22)."An independent code review of Persona's data practices" .Persona . Retrieved 2026-09-24.
  15. ↑ <sup>15.0</sup><sup>15.1</sup><sup>15.2</sup>"Persona raises $200M at $2B valuation to build the verified identity layer for an agentic AI world" .PR Newswire . Persona. 2025-04-30. Archived fromthe original on 2026-09-18. Retrieved 2026-09-24.
  16. ↑ <sup>16.0</sup><sup>16.1</sup>"From reluctant founder to $2B valuation: The story of Persona | Rick Song (Co-founder and CEO)" .First Round Review . Archived fromthe original on 2026-09-24. Retrieved 2026-09-24.
  17. ↑"Ask a fintech founder: Rick Song and Charles Yeh, Persona" .Visa . 2023-11-01. Archived fromthe original on 2026-09-24. Retrieved 2026-09-24.
  18. ↑ <sup>18.0</sup><sup>18.1</sup><sup>18.2</sup> Chang, Timothy (2025-10-07)."Persona's FedRAMP® Authorized status expands fraud prevention and identity verification options for federal agencies" .Persona . Retrieved 2026-09-24.
19. [↑](#cite_ref-gsa-fedramp_19-0)["FedRAMP"](https://www.gsa.gov/technology/government-it-initiatives/fedramp) .*U.S. General Services Administration* . Retrieved 2026-09-24.
20. [↑](#cite_ref-blog-seriesd_20-0) Song, Rick (2025-04-30).["Announcing Persona's $200M Series D"](https://withpersona.com/blog/series-d/) .*Persona* . Retrieved 2026-09-24.
  1. ↑ <sup>21.0</sup><sup>21.1</sup><sup>21.2</sup><sup>21.3</sup><sup>21.4</sup><sup>21.5</sup><sup>21.6</sup><sup>21.7</sup>"Persona Closes $150 Million Round Led by Founders Fund To Scale the World's First Trusted Identity Infrastructure" .PR Newswire . Persona. 2021-09-15. Archived fromthe original on 2026-04-01. Retrieved 2026-09-24.
  2. ↑ <sup>22.0</sup><sup>22.1</sup> Edser, Andy (2026-02-20)."Security researchers claim Persona, the provider behind Discord's UK age verification 'experiment', performs '269 individual verification checks' on user data, including those for terrorism and espionage" .PC Gamer . Archived fromthe original on 2026-09-01. Retrieved 2026-09-24.
  3. ↑ <sup>23.0</sup><sup>23.1</sup><sup>23.2</sup> Huamani, Kaitlyn (2026-02-24)."Discord delays global age verification rollout after criticism" .Associated Press . Archived fromthe original on 2026-08-30. Retrieved 2026-09-24.
  4. ↑"Peter Thiel" .Founders Fund . Archived fromthe original on 2026-09-24. Retrieved 2026-09-24.
  5. ↑ <sup>25.0</sup><sup>25.1</sup>"Roblox, Reddit and Discord users compelled to use biometric ID system backed by Palantir co-founder Peter Thiel" .Open Rights Group . 2026-02-15. Archived fromthe original on 2026-08-21. Retrieved 2026-09-24.
  6. ↑"About Us" .Biometric Update . Retrieved 2026-09-24.
  7. ↑ <sup>27.0</sup><sup>27.1</sup> McConvey, Joel R. (2026-02-23)."Persona pushes back against fears its age assurance tech isn't secure" .Biometric Update . Archived fromthe original on 2026-07-21. Retrieved 2026-09-24.
  8. ↑ <sup>28.0</sup><sup>28.1</sup>"Leave to Appeal Docket, November 27, 2024" (PDF).Illinois Courts . Supreme Court of Illinois. 2024-11-27. Retrieved 2026-09-24.
  9. ↑ <sup>29.0</sup><sup>29.1</sup><sup>29.2</sup><sup>29.3</sup><sup>29.4</sup><sup>29.5</sup> Gilbert, David (2026-01-13)."Roblox's AI-Powered Age Verification Is a Complete Mess" .Wired . Archived fromthe original on 2026-08-19. Retrieved 2026-09-24.
  10. ↑"Age Check to Chat Update & Fast Follow Roadmap" .Roblox Developer Forum . Roblox. 2026-01-09. Retrieved 2026-09-24.
  11. ↑ <sup>31.0</sup><sup>31.1</sup><sup>31.2</sup><sup>31.3</sup> Vishnevskiy, Stanislav (2026-02-24)."Getting Global Age Assurance Right: What We Got Wrong and What's Changing" .Discord . Retrieved 2026-09-24.
  12. ↑"How to Complete Age Assurance on Discord" .Discord . Archived fromthe original on 2026-02-12. Retrieved 2026-09-24.
  13. ↑ <sup>33.0</sup><sup>33.1</sup> Gioino, Catherina (2026-02-24)."Discord distances itself from Peter Thiel-backed verification software after its code was found on a Google Cloud endpoint" .Fortune . Retrieved 2026-09-24.
  14. ↑ <sup>34.0</sup><sup>34.1</sup><sup>34.2</sup><sup>34.3</sup> Harris, Neal (2026-02-24)."Post-incident review: Source map exposure on non-production subdomain" .Persona . Archived fromthe original on 2026-08-01. Retrieved 2026-09-24.
  15. ↑ <sup>35.0</sup><sup>35.1</sup><sup>35.2</sup><sup>35.3</sup> Arntz, Pieter (2026-02-20)."Age verification vendor Persona left frontend exposed, researchers say" .Malwarebytes . Archived fromthe original on 2026-09-24. Retrieved 2026-09-24.
  16. ↑ Naprys, Ernestas (2026-02-19)."Firm that verifies mugshots for ChatGPT and Roblox feeds US surveillance apparatus with 269 distinct checks" .Cybernews . Archived fromthe original on 2026-09-08. Retrieved 2026-09-24.
  17. ↑"Markets, DeFi, Regulation and top cryptocurrency news" .DL News . Retrieved 2026-09-24.
  18. ↑ <sup>38.0</sup><sup>38.1</sup> Craig, T.; Kelly, L. (2026-02-19)."OpenAI KYC provider accused of sharing users' crypto addresses with federal agencies" .DL News . Archived fromthe original on 2026-09-24. Retrieved 2026-09-24.
  19. ↑"Who We Are" .U.S. Immigration and Customs Enforcement . Retrieved 2026-09-24.
  20. ↑ <sup>40.0</sup><sup>40.1</sup><sup>40.2</sup><sup>40.3</sup><sup>40.4</sup>"Dickson v. Checkr, Inc., No. 3:26-cv-05774, Complaint" (PDF).CourtListener . U.S. District Court for the Western District of Washington. 2026-07-13. Retrieved 2026-09-24.
  21. ↑"Dickson v. Checkr Inc, 3:26-cv-05774" .CourtListener . Retrieved 2026-09-24.
  22. ↑ <sup>42.0</sup><sup>42.1</sup>"Subprocessors" .Persona . 2026-08-22. Archived fromthe original on 2026-09-18. Retrieved 2026-09-24.
  23. ↑ Vigliarolo, Brandon (2026-04-16)."If you want into Anthropic's Claude club, you may have to show ID" .The Register . Archived fromthe original on 2026-09-13. Retrieved 2026-09-24.
  24. ↑"Troubleshooting Persona identity verification" .Handshake Help Center . Archived fromthe original on 2026-07-21. Retrieved 2026-09-24.
  25. ↑"Privacy Policy" .Wealthsimple . Archived fromthe original on 2026-09-17. Retrieved 2026-09-24.
source & further reading
consumerrights.wiki — original article Adobe Healthline Consumer Rights Wiki talk:AI usage policy
── more in #ai-policy 4 stories · sorted by recency
── more on @persona identities inc. 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/persona] indexed:0 read:65min 2026-09-24 · —