Credential service provider (CSP) for public agencies

FedRAMP High is the highest authorization level for cloud services handling highly sensitive US government data, requiring implementation of over 420 NIST 800-53 security controls covering access control, encryption, incident response, continuous monitoring, and strong authentication. For identity verification systems that process sensitive identifiers and biometrics, FedRAMP High certification signals that a vendor can protect high-risk personal data and support mission-critical access decisions with acceptable security and availability.

Identity verification confirms users are who they claim to be before granting access to services or benefits. This enables secure remote access without in-person visits, reducing friction for legitimate users while blocking fraud. Agencies process applications faster and ensure services reach the right people.

Zero trust requires continuous validation of every user attempting to access a system. Identity verification establishes high-assurance identity upfront and enables reverification at critical moments. Agencies use biometric reverification to confirm identity at the service desk, during privileged access, or when accessing sensitive data.

PIV and CAC credentials are the gold standard for federal employees and military personnel. However, a gap exists for employees waiting for credentials and contractors or partners who need access but don't qualify. Agencies address this with IAL2 identity verification to confirm users and issue alternative credentials.

IAL2 is a NIST 800-63a assurance level requiring two forms of identity evidence during a remote identity verification session. Sources include: government-issued documents, biometric comparison, and validation against AAMVA or data brokers. Unlike basic knowledge-based questions, IAL2 provides high confidence the person is real, legitimate, and the rightful owner.