Highlights
Introducing TrustGraph Understand Incode’s approach to age assurance Introducing GovFaceMatch 3 years in a row named a Leader
01/04
Introducing TrustGraph The first trust network built for the agentic era Read more Age Center Understand Incode’s approach to age assurance Explore the Center Introducing GovFaceMatch The first identity solution to match biometrics against DMV records Read more 3 years in a row named a Leader A Leader in the 2026 Gartner® Magic Quadrant™ for Identity Verification Download the report
01/04
Request a demo
Back to blog
A graphic displaying the Incode logo next to Sensiba's ISO/IEC 42001 Certified logo
3 min read

Incode earns ISO/IEC 42001 certification for responsible AI management

I
Incode Oct 26, 2026

Incode today announced that it has achieved ISO/IEC 42001:2023 certification, making it among the first US-based identity verification (IDV) providers to earn the world's first international standard for AI management systems. Published in December 2023, ISO/IEC 42001 is one of the newest standards in AI governance, and relatively few organizations worldwide have been certified against it so far.

The certification was issued by Sensiba LLP, an ANAB-accredited certification body, following an independent audit of Incode's AI management system.

What is ISO/IEC 42001?

ISO/IEC 42001 sets the requirements for establishing, maintaining, and continually improving an AI management system (AIMS). It was created to give organizations a common framework for responsible AI at a time when adoption is moving faster than formal governance. The standard asks organizations to show clear governance for AI, assess risks and impacts on the people their systems affect, and keep oversight in place across the full AI lifecycle.

Performance benchmarks measure what a model can do. ISO/IEC 42001 examines the organization behind the model: how decisions about AI are made, documented, reviewed, and improved over time.

What Incode's certification covers

The certification covers Incode's AI management system in its roles as both an AI provider and an AI producer. It governs the AI systems that support the Incode Omni identity security platform across their full lifecycle:

  • Design and development
  • Training, testing, and evaluation
  • Deployment and operation
  • Monitoring and continual improvement

The certificate was issued in October 2026, and is valid through October 2029.

Why AI governance matters in identity verification

When an AI system decides whether someone is who they say they are, the stakes reach well beyond a single transaction. A bank opens an account based on that decision, a marketplace admits a new seller, and a government agency grants access to benefits. Customers and regulators want to know how that AI performs, and they increasingly want to know how it is built, tested, and overseen.

Identity verification sits where AI, biometrics, and personal data meet, which makes it one of the most closely scrutinized uses of AI. ISO/IEC 42001 gives Incode's customers independent evidence that the AI behind their verification flows is governed with the same rigor they apply to their own risk programs.

There are several other benefits to working with a provider evidencing ISO/IEC 42001 certification:

  • A stronger foundation as AI regulation matures: Regulators in the US, Europe, and beyond are setting new expectations for how AI that processes biometric and personal data is governed. A certified AI management system gives customers a structured starting point for meeting them.
  • Accountability as models evolve: Fraud tactics change constantly, and Incode's models change with them. The standard calls for structured processes to assess risk, monitor performance, and improve AI systems over time, so updates that strengthen deepfake detection and other defenses happen inside a governed framework.
  • Simpler vendor due diligence: Security, risk, and procurement teams can point to an accredited, third-party certification in RFPs, security questionnaires, and vendor assessments.

ISO/IEC 42001 joins Incode's existing security and compliance credentials, including SOC 2 Type 2, ISO/IEC 27001:2022, FedRAMP Ready status, HIPAA, the Kantara Initiative IAL2 identity verification Trust Mark, and ISO/IEC 30107-3:2023 for presentation attack detection (PAD). Together, they cover how Incode protects data, secures its infrastructure, and now governs the AI at the core of its platform.

Customers and prospects can view the certificate and Incode's full compliance documentation in the Incode Trust Center.

What comes next for AI governance at Incode

For organizations choosing an identity verification provider, the quality and certifications behind AI must now become part of the decision. As fraud threats evolve and new regulations take shape, Incode will continue to refine how it governs, tests, and monitors its AI systems.

Looking to learn more about how Incode approaches responsible AI? Talk to an identity expert today.

Ready to see it in action?

Request a demo