Security and privacy are not a feature. They’re our identity.

We take the responsibility of helping you manage your customer data seriously. That’s why we’ve taken a security and privacy first approach to everything we do.

CCPAGDPRAICPA SOC 2ISO 27001KantaraPCIHIPAAFERPAAge CheckKJMiBeta

Security and privacy at our core

Trust is built on security and privacy. That’s why Persona adheres to the highest industry standards, maintaining compliance and certifications to safeguard you and your customers.

Certifications and compliance
Our security and privacy frameworks are based on and aligned with global standards that ensure the highest grade of security is met and exceeded. Please reach out to your Persona account manager or [email protected] for a copy of our certifications.

Security

With multilayered security mechanisms, our in-depth strategy protects against a wide range of threats.

Privacy

Every decision we make begins with the safety and privacy of you and your customers' data in mind.

Data transfer practices
We perform transfers in a secure manner by encrypting data in transit. We are also able to support data residency in the US and the EU.
Privacy policy
Our Privacy Policy honors the CCPA/CPRA and GDPR frameworks. We are transparent about how we collect and use your data.
Privacy by design
Your data is yours to own. We never sell user data and provide you with secure methods to delete it in accordance with privacy regulations.
Privacy impact assessments
We continuously evaluate the impact of our activities on data privacy to ensure that we collect the minimum data needed and improve our practices.
"As we deal with sensitive health records, we needed a certified identity solution that would help us verify patients quickly, accurately, and safely. Not only did Persona meet all of these expectations, but their NIST IAL certification will also play a key role in our ability to help patients get more out of their health records."
Deven McGraw
Lead for Data Stewardship and Data Sharing at Citizen Health