For years, our industry rejected one important belief: protecting people and protecting data are the same fight. We built Incode on that core conviction, and today we are not only proving it, but also making it an industry standard.
From day one, we built Incode on a conviction most of the industry considered naive: digital trust and privacy are not opposing forces. Quite the opposite; they are the same thing. You cannot have real trust without real privacy. And you cannot deliver real privacy through half-measures, consent banners, or compliance checkboxes.
We always knew privacy must be the foundation of all technology. The world just wasn’t ready to hear it.
Foundational privacy at scale requires three evolutions:
When I founded Incode in 2015, we made a commitment that defined everything that followed: Incode would always remain AI-driven. We would never involve a human reviewer in the standard verification pipeline. This decision did not come about as a cost-saving measure. It was a foundational architectural choice.
Why? Because every human reviewer is a privacy vulnerability. Every pair of eyes on a customer’s biometric data is a point of exposure, a vector for breach. The industry accepted this as the cost of doing business. But we refused to follow the crowd.
Instead, we built proprietary AI from the ground up: our own models, our own research, and our own infrastructure. We invested years into building identity verification technology that could match and exceed what human reviewers could accomplish, without ever requiring a human to see a customer’s face, document, or personal data. The result is a system that is more private, accurate, and resilient than anything built on manual review, not to mention much faster.
For our most regulated verification flows, we take it one step further.
Age estimation and verification are markedly different from identity verification. By their very nature, these workflows involve sensitive populations, including those under 18. For us, that means the privacy standard isn’t just high — it’s absolute.
When you estimate age with Incode, a human never sees an end user’s biometric data as part of the standard verification process. Now, we are taking these safety measures even further. With On-Device Age Estimation, zero data transmission occurs, period. Biometric processing happens entirely on the user’s own device. Sensitive information stays inside the user’s environment by design, with no tradeoff on accuracy. We are the first company to deliver on-device age assurance at enterprise scale and at this level of accuracy.
We did not build it this way because the law required it. We built it this way because we saw no other responsible option.
The law has since caught up. More than two dozen U.S. states have now made age verification a requirement rather than a choice, and the obligation keeps widening. From adult content to social media, app stores, and the operating systems beneath them, federal proposals are increasingly moving to extend age verification across all industries.
Organizations need age estimation, verification and assurance they can deploy with confidence, matched to the sensitivity of each flow. That is what Incode delivers across the board. On-Device age estimation is the highest expression of it: verification that meets the obligation while keeping sensitive data in the one place least exposed to risk. It is the standard we have been building toward from the start.
For years, our industry has accepted a false tradeoff: companies believed that to stop fraud, they had to sacrifice consumer privacy. That collaboration required data pooling. That defense meant exposure. The result: a world where sensitive data was copied, stored, brokered, and breached by the very systems that were supposed to protect users.
Now, the consequences of this model are manifesting. We’re seeing massive breaches, increased regulatory pressure, and the discovery of personal data stored by third parties for years without consent. AI has made these issues exponentially worse, making it easier than ever for fraudsters to exploit insecure systems.
Put another way: the shaky foundation of the identity verification industry is buckling under the weight of a changing world.
At Incode, we have been working towards fixing this faulty systems. We have long believed that the real unlock was network-level intelligence, which enables institutions to collaborate against fraud without ever pooling or exposing sensitive customer data.
We had the vision. We had been investing for years in privacy-preserving network intelligence. But we needed the cryptographic foundation to make our vision complete and airtight. Identiq - recently acquired by Incode - provides that critical capability, enabling us to deliver on-device, private-by-design identity verification and age assurance, all built on proprietary AI technology.
By acquiring Identiq, we are combining the Incode platform with a cryptographic layer built on nearly a decade of dedicated R&D and more than $50 million invested in patented privacy-enhancing technology. The result is three core capabilities the traditional identity verification model does not deliver:
Companies share privacy-preserving trust signals rather than raw personal data. No central data lakes are created. No data brokerage occurs. Raw personal information stays under the strict control of each organization. The centralized attack surface that traditional collaboration created is minimized by design.
The network detects repeat fraud patterns and fraud ring patterns across institutions through privacy-preserving cryptographic analysis, without needing to know whose face or ID triggered any given signal. World-class fraud intelligence with no access to underlying personal data.
When a verification event maps to trusted behavioral patterns in the network, the system reduces friction in real time. Good legitimate users benefit without other institutions in the network learning the underlying identity. The network gets smarter with every verification while keeping every individual’s data sealed and secured.
Identiq is one part of a larger bet.
In 2026, Incode is committing more than $100 million to privacy infrastructure. The investment spans the Identiq integration, continued R&D in cryptographic peer-to-peer collaboration, expanded on-device processing capabilities, and the engineering required to scale the combined platform to billions of annual verifications across the globe.
This investment underscores our commitment to protecting end users and the organizations that serve them. The identity verification industry has spent decades treating privacy as a compliance layer bolted onto architecture that was never designed to protect users in the first place. That approach carries a significant price, and we’re not going to let our customers bear it.
Privacy-first architecture requires the same scale of investment as any other foundational platform decision. It has to be built in from day zero and resourced like the core infrastructure it is. That is what this commitment represents: decisions we made before anyone was asking us to make them, now backed by the investment it always deserved.
The future of identity is private.
We have been building its foundations since 2016.
In 2026, we are making it a reality for everyone.
This is a brand film we created in our founding years. We are sharing it now as evidence of something simple: we did not arrive at privacy-first architecture because the market demanded it. We were founded on it.
%20(1).avif)
Conquista información de expertos sobre el panorama en evolución de la identidad impulsada por la IA
verificación y prevención del fraude.