Age-assurance vendors
10 vendors named by the services in the index. Each profile quotes the vendor's own retention wording, lists certifications with their expiry dates, records regulator actions and published incidents, and sets the vendor's default beside what each deployer says. Searches such as "is Yoti safe" get facts here, not a rating.
| Vendor | Methods | Retention, as published | Certifications | UK deployments in the index | Verified |
|---|---|---|---|---|---|
| Yoti Yoti Ltd · GB |
Face scanPhoto IDDigital IDReusable ID | “Yoti deletes the selfie image as soon as an age estimate is given – no facial images are shared with the Yoti Client or…” quoted from yoti.com, checked 18 October 2026 |
ISO 27001, ISO 27701, SOC 2 Type II, PAS 1296:2018 ACCS 1:2020 Level 2 (Age Estimation), Facial Age Estimation model Aug24, valid to 21 Oct 2026; ACCS 1:2025 / ISO/IEC 27566-1:2025 (Age Assurance), Age Verification Service 2026-2.1, valid to 6 Sep 2029 |
Facebook, Feeld, Instagram, Minecraft, OnlyFans, PlayStation, Spotify, Threads, Xbox | verified 18 October 2026 |
| Epic Kids Web Services Kids Web Services Ltd (Epic Games) · GB |
Face scanPhoto IDCredit cardParental consent | “Once you have successfully verified your age through our Parent Verification or Age Verification service, we will store…” quoted from kidswebservices.com, checked 18 October 2026 |
none recorded | Bluesky, EA, Epic Games and Fortnite, Riot Games | verified 18 October 2026 |
| k-ID Kidentify Pte Ltd · SG |
Face scanPhoto IDCredit cardReusable ID | “Regardless of which provider you choose to perform age assurance, we at k-ID do NOT store the information that you…” quoted from k-id.com, checked 18 October 2026 |
ACCS 1:2025 / ISO/IEC 27566-1:2025 (Age Assurance), k-ID Age Assurance System, valid to 14 Apr 2029 ACCS 0:2021 and ACCS 3:2021 (Age Appropriate Design), valid to 4 Apr 2027 ESRB Privacy Certified Program (stated by Kick, 21 May 2026) ISO 27001:2022 (stated by Kick, 21 May 2026) ISO 27701:2019 (stated by Kick, 21 May 2026) SOC 2 Type 2 (stated by Kick, 21 May 2026) |
Discord, Kick, Tumblr, Twitch | verified 18 October 2026 |
| Persona Persona Identities, Inc. · US |
Photo IDFace scan | “Persona deletes all of your personal information, including any images if collected, immediately after the verification…” quoted from help.withpersona.com, checked 18 October 2026 |
ACCS 1:2020 Level 2 (Age Estimation), Persona Selfie Age Estimation dashboard v2.2.1, valid to 12 Nov 2026 | Character.AI, ChatGPT, Reddit, Roblox | verified 18 October 2026 |
| Google Google LLC · US |
OtherPhoto IDCredit cardFace scanEmailDigital ID | “When age estimation is complete, Private ID shares with Google if they can confirm you’re old enough. Your selfie is…” quoted from support.google.com, checked 18 October 2026 |
ACCS certificate of conformity for facial age estimation, 18 Dec 2023 (EAL3 estimation, EAL1 liveness) | Discord, Google Account and Google Search, YouTube | verified 18 October 2026 |
| VerifyMy VerifyMy Limited (KYC AVC UK Ltd) · GB |
EmailFace scanPhoto IDCredit card | “We and our partners will delete your personal data immediately as soon as the Check is complete and the result has been…” quoted from verifymy.io, checked 18 October 2026 |
IEEE 2089.1-2024 (Age Estimation API, to 21 Sep 2027); ACCS 1:2025/ISO 27566-1 (to 20 May 2029) | eBay, Google Account and Google Search, YouTube | verified 18 October 2026 |
| Apple Apple Inc. · US |
Credit cardPhoto IDOther | “kept for a short period of time” quoted from support.apple.com, checked 6 September 2026 |
none recorded | Apple devices, Pornhub, YouPorn, RedTube | verified 6 September 2026 |
| Ondato Ondato UAB · LT |
Face scanPhoto IDReusable ID | “Yes. OnAge uses facial analysis and age estimation for accuracy, but it deletes biometric data instantly. Only the…” quoted from ondato.com, checked 18 October 2026 |
ACCS IEEE 2089.1-2024 Effective (to 11 Feb 2028) and Highly Effective (to 8 Apr 2028); ISO 27001, 27018 | OnlyFans | verified 18 October 2026 |
| OneID OneID Ltd · GB |
Open bankingMobile operatorPhoto IDFace scanReusable ID | “No long-term personal data retention” quoted from oneid.uk, checked 18 October 2026 |
DVS trust framework (first OSP and holder provider); FCA open-banking FRN 928911 | none in the index | verified 18 October 2026 |
| Veratad Veratad Technologies LLC · US |
Photo IDFace scanReusable IDOther | “Upon completion of a verification transaction, Veratad does not retain full underlying identity data as part of a…” quoted from veratad.com, checked 18 October 2026 |
ACCS 1:2025 / ISO/IEC 27566-1:2025, VX platform v2.4, issued 14 Apr 2026, valid to 14 Apr 2029 | none in the index | verified 18 October 2026 |
Six more vendors from the research (Incode, AgeChecked, 1account, Luciditi, TransUnion, Jumio) and Meta's in-house estimation are due in the next expansion. A vendor appears here once a service in the index names it.