--- title: Certifications canonical: https://shuftipro.com/certifications/ description: "Shufti holds SOC 2 Type II, ISO 27001:2022, PCI DSS, iBeta PAD Level 3, and Cyber Essentials Plus independently verified security and compliance credentials." modified: 2026-10-02T10:27:23+00:00 --- # Certifications CERTIFICATIONS & COMPLIANCE Verified compliance across every standard we hold Enterprise buyers need more than a vendor's word on security and compliance. Every certification on this page was issued by an independent third party after assessing Shufti's actual controls, processes, or systems. We provide the documentation, you verify it. Book a Demo Contact Us Recognised as a Leader inG2 Fall 2026 See all reviews Independently Audited. Globally Certified Audits And Certifications ThatBack Every Trust Claim iBeta, All Levels Our liveness detection was adversarially tested at Level 1, 2, and 3. It was held. Learn More PCI DSS Assessed by an independent QSA across all 12 control domains. AoC available for your auditor. Learn More SOC 2 Type II An independent auditor assessed 12 months of our security controls, not one day. Learn More QG-GDPR A UK accreditation body audited our GDPR compliance processes and certified them. Learn More Cyber Essentials /Cyber Essentials Plus Both tiers of the UK government cybersecurity scheme. Plus tier independently tested. Learn More Regulatory Readiness Compliance Coverage BuiltFor Regulated Markets GDPR We process biometric data under a documented legal basis and delete it on schedule. Learn More CCPA / CPRA Shufti is a compliant service provider under California law, not a data seller. Learn More Build Trust Into Every Customer Journey Verify users, prevent fraud, meet compliance requirements, and protect every decision with one AI-powered identity platform built for global scale. Book a Demo Try Now Your Go-To for KYC/AML & Fraud Resources Explore Content library Read More 11 November, 2025 Redefining Global Identity Verification Leadership with Shufti's AI and In-House Technology An independent read on where Shufti sits in a market growing at 20.7% CAGR, covering in-house technology, global coverage and how the IDV field is consolidating. Report Read More Read More 22 June, 2026 Where Can Identity Data Legally Live? 2026 Guide Where can KYC and identity data legally sit. A practical read on residency, localisation and sovereignty across 15 markets, with a checklist to put to your vendor. Guide Read More Read More 29 October, 2025 IDV Vendor That Builds, Not Bundles Choosing an IDV vendor is a high-stakes call. Why owning the technology stack matters so much, and what real customisation for your own industry actually buys you. Insight Read More Explore Content library