Age-assurance vendors
10 vendors named by the services in the index. Each profile quotes the vendor's own retention wording, lists certifications with their expiry dates, records regulator actions and published incidents, and sets the vendor's default beside what each deployer says. Searches such as "is Yoti safe" get facts here, not a rating.
| Vendor | Methods | Retention, as published | Certifications | UK deployments in the index | Verified |
|---|---|---|---|---|---|
| k-ID Kidentify Pte Ltd · SG |
Face scanPhoto ID | “k-ID does NOT store the information that you provide to prove your age. All we store is the result of the verification…” quoted from k-id.com, checked 6 September 2026 |
ACCS 0:2021 and ACCS 3:2021 (Age Appropriate Design), valid to 4 Apr 2027 | Discord, Kick, Tumblr, Twitch | verified 6 September 2026 |
| Persona Persona Identities, Inc. · US |
Photo IDFace scan | “Persona deletes all of your personal information including any images within 3 days.” quoted from help.withpersona.com, checked 6 September 2026 |
none recorded | ChatGPT, Reddit, Roblox, X and Grok | verified 6 September 2026 |
| Yoti Yoti Ltd · GB |
Face scanPhoto IDDigital IDReusable ID | “Images are not stored, shared, re-used or sold on. Images are immediately and permanently deleted… we do not use them…” quoted from yoti.com, checked 6 September 2026 |
ISO 27001, ISO 27701, SOC 2 Type II, PAS 1296:2018 | OnlyFans, PlayStation, Spotify, Xbox | verified 6 September 2026 |
| Apple Apple Inc. · US |
Credit cardPhoto IDOther | “Your credit card or ID document aren't stored unless you choose to save them” quoted from biometricupdate.com, checked 6 September 2026 |
none recorded | Apple devices, Pornhub, YouPorn, RedTube | verified 6 September 2026 |
| Epic Kids Web Services Kids Web Services Ltd (Epic Games) · GB |
Face scanPhoto IDCredit cardParental consent | “stores verified status with your hashed email address; retains for as long as necessary to fulfil the purposes” quoted from kidswebservices.com, checked 6 September 2026 |
none recorded | Bluesky | verified 6 September 2026 |
| Google Google LLC · US |
OtherPhoto IDCredit cardFace scanEmail | “ID deleted after your date of birth is successfully verified; selfie then deleted; card data retained as necessary to…” quoted from support.google.com, checked 6 September 2026 |
ACCS certificate of conformity for facial age estimation, 18 Dec 2023 (EAL3 estimation, EAL1 liveness) | YouTube and Google Account | verified 6 September 2026 |
| Ondato Ondato UAB · LT |
Face scanPhoto IDReusable ID | “deletes biometric data instantly. Only the result — old enough or not old enough — remains” quoted from ondato.com, checked 6 September 2026 |
ACCS IEEE 2089.1-2024 Effective (to 11 Feb 2028) and Highly Effective (to 8 Apr 2028); ISO 27001, 27018 | OnlyFans | verified 6 September 2026 |
| Veratad Veratad Technologies LLC · US |
Photo IDFace scanReusable IDOther | No published retention period found (checked 6 September 2026). | ACCS 1:2025 / ISO/IEC 27566-1:2025, VX platform v2.4, issued 14 Apr 2026, valid to 14 Apr 2029 | Discord | verified 6 September 2026 |
| VerifyMy VerifyMy Limited (KYC AVC UK Ltd) · GB |
EmailFace scanPhoto IDCredit card | “delete your personal data immediately as soon as the Check is complete” quoted from verifymy.io, checked 6 September 2026 |
IEEE 2089.1-2024 (Age Estimation API, to 21 Sep 2027); ACCS 1:2025/ISO 27566-1 (to 20 May 2029) | YouTube and Google Account | verified 6 September 2026 |
| OneID OneID Ltd · GB |
Open bankingMobile operatorPhoto IDFace scanReusable ID | “No long-term personal data retention” quoted from oneid.uk, checked 6 September 2026 |
DVS trust framework (first OSP and holder provider); FCA open-banking FRN 928911 | none in the index | verified 6 September 2026 |
Six more vendors from the research (Incode, AgeChecked, 1account, Luciditi, TransUnion, Jumio) and Meta's in-house estimation are due in the next expansion. A vendor appears here once a service in the index names it.