Entrust Review
6.4/10The identity-verification product formerly sold as Onfido, now folded into Entrust after the April 2024 acquisition: a register-grade UK DIATF certification at high-confidence profile H1A (NQA-issued, Right to Work and DBS), the Atlas AI document engine, deep-pocketed Quandt-family ownership, and a dated April 2025 gaming operator's guide, but not one first-party named gambling operator that survives the onfido.com shutdown.
Our read
A mature engine under the former Onfido: Atlas AI document classification (2,500+ types, 195 countries, ms speed, vendor-stated) plus biometric liveness, age by database or document, eID and database checks, AML workflows, deepfake and synthetic-identity detection, and no-code Workflow Studio, with fresh 2026 SDKs and reusable identity only a platform theme rather than a named gaming feature.
Register-grade and high: DIATF certified at high-confidence profile H1A (plus M1A) for Right to Work and DBS Enhanced, NQA-issued under UKAS accreditation, plus ETSI TS 119 461 and a public IDV practice statement, docked because SOC 2 and ISO 27001 for the IDV product stay claimed only and no US gaming register was confirmed.
API v3.6 plus web and mobile SDKs plus Workflow Studio orchestration with docs split across the legacy Onfido and new Entrust domains, backed by deep-pocketed private ownership, with brand and SDK transition churn through 2026 (the rename, the Smart Capture deprecation path, a Flutter SDK still pending) the offset.
The segment's zero: the vertical page and April 2025 gaming operator's guide exist, but no first-party named gambling operator survives the onfido.com shutdown, and the circulating tier-1 US sportsbook "Onfido client" list is a banned-farm fabrication explicitly not credited, with the only legitimate named clients (Job&Talent, Access Group, Amiqus, Salesforce FSC) all non-gaming.
Deep-pocketed Quandt-family ownership (no earnings pressure) and a Gartner MQ for Identity Verification placement in 2025, priced against the heaviest single IDV-product privacy settlement in the tier ($28.5M Sosa v. Onfido, 2023, roughly 670,000 class members) plus dated parent-brand trust events (the 2022 LockBit breach and leak and the 2024 Chrome CA distrust that forced the Sectigo divestiture).
No public pricing anywhere, and the per-check ranges that circulate for Onfido are third-party marketplace estimates, not vendor-published rates (Jul 2026).
Methodology. Our own score, a weighted average of six dimensions, tilted toward verification coverage and compliance. Weighted on the identity-verification scale, where verification coverage carries the most at 0.22 and compliance and certifications follows at 0.20, with gaming footprint at a heavy 0.16, a mix that credits Entrust's engine and DIATF trail while pricing the zero-operator gaming footprint and the legacy trust file hard. Read the full methodology
- A register-grade UK certification trail: DIATF at high-confidence profile H1A (Right to Work and DBS Enhanced), NQA-issued under UKAS accreditation, plus ETSI TS 119 461 identity proofing, among the stronger identity-proofing records in the tier.
- Deep-pocketed private ownership: Entrust is held by the Quandt family office with no quarterly-earnings pressure and a long acquisition record, and IDV became a sharpened focus after the 2025 sale of the public TLS-certificate business to Sectigo.
- A mature IDV engine carried over from Onfido: Atlas AI document classification (a vendor-stated 2,500+ types and 195 countries in milliseconds), deepfake and synthetic-identity detection, no-code Workflow Studio orchestration, and a January 2026 SDK refresh.
- A dated gaming commitment on paper: a dedicated gaming vertical page and a gaming operator's guide to identity verification published in April 2025, plus a Gartner Magic Quadrant for Identity Verification placement in 2025 as Entrust.
- The zero-operator gap: no first-party named gambling operator survives the onfido.com shutdown, so the review cannot cite a single verifiable casino or sportsbook client, and the only legitimate named clients that remain (Job&Talent, Access Group, Amiqus, Salesforce FSC) are all non-gaming.
- A live misinformation hazard: a fabricated roster of tier-1 US sportsbook "Onfido clients" still circulates through banned comparison farms, a list a buyer must actively avoid mistaking for evidence rather than treat as a reference.
- A heavy privacy legacy: the $28.5M Sosa v. Onfido BIPA class settlement (N.D. Ill., preliminary approval May 2023, roughly 670,000 class members) is the heaviest single IDV-product privacy settlement in the tier, dating from the Onfido era before Entrust.
- Dated parent-brand trust events: Entrust was breached by LockBit in June 2022 with stolen data leaked that August, and Google Chrome moved to distrust Entrust's public TLS roots in 2024, the event that forced the Sectigo divestiture, neither an IDV-product issue but both on the parent name.
- A brand and SDK transition still in motion: the Onfido-to-Entrust rename, the Smart Capture SDK deprecation path, a Flutter SDK still pending, and documentation split across two domains all point to integration churn risk through 2026.
Enterprise and multi-jurisdiction operators that value a register-grade UK DIATF high-confidence trail, a mature document and biometric engine with deepfake detection, no-code orchestration, and a deep-pocketed owner, and that do not need a published reference list of gambling clients.
Buyers who want named operator references, published pricing, or a clean parent-brand trust record, and anyone tempted to trust the fabricated tier-1 sportsbook client claims as evidence of gaming adoption.
Markets & licensing
Entrust's verification trail is strong on the UK side and unconfirmed everywhere else. The anchor is a DIATF certification at high-confidence profile H1A, with M1A also in scope, covering Right to Work and DBS Enhanced and issued by NQA, a UKAS-accredited certification body, first certified in October 2022 and still listed in OfDIA register coverage as of February 2025. An NQA certificate PDF is on the record, with the certificate number and expiry not published in the register listing. On top of that sits an ETSI TS 119 461 identity-proofing certification added in June 2023 and a public Entrust Remote IDV Practice Statement and Security Policy. The soft spots are the US and the trust center: no US state gaming registration is on record, and while SOC 2 and ISO 27001 are asserted at the corporate level, the IDV-scoped report class is not published, so both stay claimed only.
Entrust sells IDV into the US and runs a gaming vertical page pitched at operators, but no US state gaming registration was confirmed here, unlike the PA-Certified trail that Socure and GBG can show. Treat the US posture as commercial presence without a checkable state-register anchor, and confirm any specific state registration your book needs during procurement rather than off the marketing pages.
The UK is the strong leg by a wide margin. The DIATF certification sits at the high-confidence H1A profile for Right to Work and DBS Enhanced, issued by NQA under UKAS accreditation, first certified in October 2022 and still on the OfDIA register coverage as of February 2025. Paired with ETSI TS 119 461, that is one of the more checkable identity-proofing trails in the tier, the kind of anchor UK-facing operators and their auditors look for.
- UK DIATF certification (high-confidence H1A)United Kingdom
- Certified against the DIATF Beta framework at high-confidence profile H1A, with M1A also in scope, for Right to Work and DBS Enhanced, issued by NQA, a UKAS-accredited certification body · Originally certified Oct 2022 · listed in OfDIA register coverage Feb 2025 · NQA certificate PDF on record, cert number and expiry not published
- ETSI TS 119 461 identity proofingEU standard
- Identity-proofing certification against the ETSI TS 119 461 standard, supporting regulated-market expansion · Added Jun 2023 (Biometric Update, 2023-06)
- Entrust Remote IDV Practice Statement and Security PolicyPublic artifact
- A public practice-statement and security-policy document for the remote IDV service · Served from the legacy SDK domain (sdk.onfido.com), a checkable public artifact
- SOC 2 and ISO 27001Infosec attestation
- Corporate-level security certifications asserted at the Entrust trust center, with the IDV-scoped report class not confirmed · Claimed only · no public certificate published for the IDV product (Jul 2026)
Licensing tier: A register-grade UK trail against an unresolved US and infosec picture: the DIATF high-confidence H1A certification and ETSI TS 119 461 are checkable identity-proofing anchors, but no US state gaming register was confirmed and the SOC 2 and ISO 27001 report class for the IDV product stays claimed only, which is why the overall register status is partial rather than verified.
The checkable market anchor is the UK DIATF certification, with coverage elsewhere a vendor-stated 195-country footprint rather than a per-market license stack, since IDV carries no gambling-license register by design.
No restricted-market list applies: Entrust ships identity software from Minnesota under its own name and Onfido's, with no gambling license anywhere in the stack to restrict (Jul 2026).
Platform & capabilities
The feature set: what's built in. Capabilities light up when present. Anything not shown isn't offered or isn't disclosed.
Integrations & engineering
One contract and one API instead of a separate deal per studio, feed, or PSP. Here's what connects, how fast, and on what stack.
Entrust ships as a versioned API (v3.6) plus web and mobile SDKs that operators wire into their own onboarding flow, with document, biometric, database, age, and AML checks reachable through one integration and Atlas AI doing the document classification and fraud detection underneath. The no-code IDV Workflow Studio lets a compliance team combine those checks and passive fraud signals per journey without engineering work. The named integrations that survive the Onfido shutdown are all non-gaming, so a gaming operator integrates direct rather than through a named gaming platform relationship.
No public integration-time claim for gaming (Jul 2026). The developer docs cover the API and SDK surface, but they sit across the legacy Onfido and new Entrust domains, so confirm the exact SDK version and endpoint during onboarding and expect some transition churn through 2026.
Products & tools
The former Onfido engine, now Entrust Identity Verification: Atlas AI classifies documents in milliseconds across a vendor-stated 2,500+ types and 195 countries, paired with biometric liveness, database and age checks, AML workflows, deepfake and synthetic-identity detection, and the no-code IDV Workflow Studio, delivered through a fresh set of 2026 mobile SDKs.
Entrust Identity Verification
The renamed Onfido IDV stack: document verification, biometric selfie plus liveness, database and eID checks, age verification, and AML screening on one platform, with Atlas AI reading documents in milliseconds and deepfake and synthetic-identity detection layered on top.
- Document verification across a vendor-stated 2,500+ types and 195 countries (product and gaming pages, Jul 2026)
- Atlas AI document classification and fraud detection, the bespoke engine carried over from Onfido
- Biometric selfie with liveness, database and eID verification, and age checks by database or document
- Deepfake and synthetic-identity detection billed against generative-AI onboarding fraud
- AML and sanctions screening reachable in the same verification flow
IDV Workflow Studio
The renamed Onfido Studio: a no-code canvas that combines IDV checks, trusted data sources, and passive fraud signals into an onboarding flow without engineering work, aimed at operators tuning verification steps per risk level.
- No-code orchestration of document, biometric, database, and AML checks in one journey
- Passive fraud signals and trusted data sources wired into the same flow
- Carried over and renamed from Onfido Studio, the pre-acquisition orchestration product
- Positioned for teams that want to adjust verification steps without a code release
- Sits alongside Atlas AI rather than replacing it
Entrust IDV SDKs for Mobile
The replacement for Onfido's Smart Capture SDKs: native iOS, Android, and React Native SDKs whose major version shipped in January 2026, with a Flutter SDK expected later in the year, sitting over the v3.6 verification API.
- Native iOS, Android, and React Native SDKs, major version released January 2026
- Flutter SDK expected later in 2026, so the mobile set is not yet complete
- Replace the deprecated Onfido Smart Capture SDKs on a migration path
- Sit over the versioned verification API (v3.6 docs live)
- Documentation split across the new entrust.com identity domain and the legacy Onfido doc host
On the record
The history that matters: the milestones, the scale, the awards, and who runs it.
The product traces to Onfido, founded in London in 2012 as an AI-based identity-verification startup that grew to a vendor-stated 1,200-plus customers across financial services, e-commerce, gaming, and the sharing economy. Its modern chapter starts with Entrust: exclusive discussions were announced on February 6, 2024, and the acquisition completed on April 9, 2024, for a price never officially disclosed but reported by TechCrunch sources at roughly $650M. Entrust Corporation itself is privately held by the Quandt family office, which bought Datacard in 1987, took over Entrust in 2013, and rebranded the combined company Entrust in 2020, so there is no quarterly-earnings pressure and a long acquisition record behind the IDV line. The most consequential recent event is a divestiture rather than a purchase: Entrust sold its public TLS-certificate business to Sectigo, announced January 29, 2025 and completed September 18, 2025, following Google Chrome's 2024 decision to distrust Entrust's public roots, a move that sharpened the company onto identity and quantum-ready cryptography and left the IDV product unaffected.
Brands & clients on the platform
Corporate
- Onfido (2024)
- nCipher
- WorldReach
Leadership
Milestones
- 2012
Onfido is founded in London as an AI-based identity-verification startup, later serving a vendor-stated 1,200-plus customers across financial services, e-commerce, gaming, and the sharing economy.
- 2022
Onfido is originally certified against the UK DIATF at high-confidence profile H1A (October), and is later breached at the parent level by LockBit (June), which leaks stolen Entrust data that August.
- 2023
The $28.5M Sosa v. Onfido BIPA class settlement reaches preliminary approval (May, roughly 670,000 class members, N.D. Ill.), and Onfido adds an ETSI TS 119 461 identity-proofing certification (June).
- 2024
Entrust announces exclusive discussions to buy Onfido (Feb 6) and completes the acquisition (Apr 9, roughly $650M per TechCrunch sources), while Google Chrome moves to distrust Entrust's public TLS roots for certs issued after Nov 11.
- 2025
Entrust publishes a gaming operator's guide to identity verification (April), and sells its public certificate business to Sectigo (announced Jan 29, completed Sep 18), sharpening onto identity and quantum-ready crypto.
- 2026
The Onfido-to-Entrust rebrand is complete (onfido.com 301-redirects to entrust.com, verified Jul 12), the new Entrust IDV mobile SDKs ship a major version (January), and a Flutter SDK is expected later in the year.
Where they're pushing next
- UK and EU regulated onboarding, on the DIATF high-confidence and ETSI trail
- Gaming, pitched via the April 2025 operator's guide but without a named-operator roster
- Enterprise identity-centric security, the Quandt-family focus after the Sectigo divestiture
Awards & recognition
Trust signals
The checks an operator runs before signing: incidents, enforcement, ownership, and longevity, from our research.
- Litigation or public disputes on record
- Security incidents: Major
Entrust vs alternatives
The same attributes, side by side, from our normalized provider set, useful for seeing where this vendor fits against its peers.
| Attribute | Entrust | Jumio | Sumsub | Veriff |
|---|---|---|---|---|
| Founded | 2012 | 2010 | 2015 | 2015 |
| Team | — | — | 500+ | — |
| US market | Available | Available | — | Available |
| Pricing | Not published | Not published | Public | Not published |
| Country coverage | 195 countries | 200+ countries and territories | Document-free verification in… | 230+ countries |
| UK DIATF | Yes | Yes | Certified IDSP | UK DIATF gamma |
The take: Jumio, Sumsub, and Veriff all carry named gaming operators that Entrust cannot show, which is the whole difference: Jumio brings the deepest named-operator roster, Sumsub pairs a deeper certification stack with public per-check pricing, and even Veriff, thin at one flagship, has a verifiable one where Entrust has zero. Pick Entrust when a register-grade UK DIATF high-confidence trail, a mature Atlas engine, and a deep-pocketed owner matter more than a public list of gambling clients.
Pricing & terms
Entrust quotes pricing on request. Exact figures come at the deal stage, under NDA. Here's what's public about the model and terms.
Sales-led and negotiated: no per-verification rates, setup fees, or minimums published for operators (Jul 2026)
Turnkey
White-label
Support & account management
The service layer operators inherit: availability, the channels support runs on, and language coverage.
Frequently asked
The things operators actually ask before signing.
Is Onfido still a thing, or is it Entrust now?+
It is Entrust now. Entrust acquired Onfido in a deal that completed on April 9, 2024, and the brand is retired: onfido.com 301-redirects to entrust.com/products/identity-verification (verified July 12, 2026). The product is now "Entrust Identity Verification," Onfido Studio became Entrust IDV Workflow Studio, and the Smart Capture SDKs were replaced by new Entrust IDV SDKs. Atlas AI is the one Onfido name that survived, and it is still the document-classification and fraud-detection engine underneath. Some documentation still lives on the legacy documentation.onfido.com host during the transition, but the brand a buyer contracts with is Entrust.
Which gambling operators use Entrust or Onfido?+
None that can be verified. When onfido.com was retired, its casino and sportsbook case studies went with it, and the current Entrust gaming page and resources name no operator. The tier-1 US sportsbook "Onfido client" lists that still circulate online trace to banned comparison farms and are a debunked fabrication, so they should not be treated as evidence. The only legitimate named clients that survive the rebrand (Job&Talent, Access Group, Amiqus, Salesforce Financial Services Cloud) are all non-gaming. Entrust runs a gaming vertical page and published an April 2025 gaming operator's guide, but the named-operator footprint for gaming is zero.
Is Entrust UK-compliant for identity verification?+
Yes, and this is its strongest asset. Entrust, as the former Onfido, is certified against the UK DIATF at the high-confidence profile H1A (with M1A also in scope) for Right to Work and DBS Enhanced, issued by NQA, a UKAS-accredited certification body. It was originally certified in October 2022 and was still listed in OfDIA register coverage as of February 2025. On top of that sits an ETSI TS 119 461 identity-proofing certification added in June 2023 and a public Remote IDV Practice Statement. An NQA certificate PDF exists, though the certificate number and expiry are not published in the register listing.
What is the BIPA settlement in Onfido's history?+
It is the heaviest single IDV-product privacy settlement in this tier, and it predates Entrust. In Sosa v. Onfido, Inc. (Northern District of Illinois), Onfido settled Illinois Biometric Information Privacy Act claims over facial biometrics collected through partner apps for $28.5M, with preliminary approval in May 2023, roughly 670,000 class members, and a claims deadline of October 6, 2023. The conduct was Onfido-era, well before Entrust completed the acquisition in April 2024, so a buyer is contracting with a differently owned company than the one behind the settlement, but the legacy is a real line on the record.
Is the Entrust parent brand stable, and does it publish pricing?+
Stable but not spotless, and no on pricing. Entrust is privately held by the Quandt family office, so there is no quarterly-earnings pressure, and it recently sharpened onto identity by selling its public TLS-certificate business to Sectigo (announced January 2025, completed September 2025). But the parent name carries two dated trust events: a June 2022 LockBit breach that leaked stolen data that August, and Google Chrome's 2024 decision to distrust Entrust's public TLS roots, which is what forced the Sectigo divestiture. Neither is an IDV-product issue. Entrust publishes no pricing for IDV, and the per-check ranges that circulate for Onfido are third-party marketplace estimates, not vendor rates, so budget for a sales-led, negotiated deal.