Identy.io has announced that its Face SDK v6.3.0 has obtained ISO/IEC 30107-3 Level 2 Presentation Attack Detection (PAD) certification from iBeta Quality Assurance, with a reported perfect score against the tested spoofing attacks. The company is positioning the result as evidence that its mobile-focused facial biometric can resist mid-sophistication presentation attacks while operating entirely on-device.
According to Identy.io’s release, the certification covers the company’s Face SDK v6.3.0 and applies to both server-based deployments and full on-device liveness processing. Identy states that it is currently the only mobile biometric vendor with Level 2 PAD certification while offering full on-device processing in addition to server-side options, a combination aimed at use cases where network connectivity is unreliable or privacy requirements favor local processing of biometric data.
The testing was conducted by iBeta, which is accredited by NIST’s NVLAP program to perform ISO 30107-3 PAD evaluations. The confirmation letter describes a Level 2 test campaign using mid-level artefact creation techniques, with testing carried out on a Samsung Galaxy S20 running Android 12 and an Apple iPhone 15 running iOS 17.5.1 connected to the same backend. The lab alternated bona fide presentations with presentation attacks across five different spoof species, executing 1,500 attacks in total. iBeta reports that Identy’s liveness detection blocked all of the attacks, with an Attack Presentation Classification Error Rate (APCER) of zero percent, and confirmed conformance with ISO 30107-3 at Level 2.
The certification is reflected in iBeta’s public list of ISO 30107-3 PAD confirmation letters, which shows a Level 2 entry for IDENTY Identy.io Face SDK 6.3.0 dated October 6, 2025. Identy had previously obtained Level 1 certification for an earlier version of the SDK, indicating a progression toward more robust resistance against stronger attack instruments.
For relying parties in sectors such as financial services, telecommunications, and public-sector digital ID, Level 2 PAD certification from an NVLAP-accredited lab has become an important indicator when assessing the resilience of biometric onboarding and authentication solutions. Identy’s emphasis on fully on-device liveness is likely to appeal to customers that want to reduce latency, limit the transfer of biometric templates, or maintain service continuity in low-bandwidth environments while still meeting internal and external expectations for anti-spoofing assurance.
—
By the ID Tech Editorial Team
