Oz Forensics, a provider of biometric liveness detection and digital identity verification software, has completed its first SOC 2 examination covering key components of its platform. The company says the assessment, conducted under the American Institute of CPAs Trust Services Criteria, evaluates the design and operating effectiveness of controls for security, availability, and confidentiality.
Details published in Oz Forensics’ trust center indicate that the 2025 SOC 2 Type 2 report applies specifically to the Oz Liveness and Oz Face Matching products. According to the company, the independent audit confirmed that controls for protecting customer data, maintaining service uptime, and safeguarding sensitive information are in line with the framework’s requirements. The trust center also highlights complementary measures, including penetration testing and a responsible disclosure program, alongside the SOC 2 report.
Oz Forensics positions its technology as a defense against presentation and injection attacks, including deepfakes and other synthetic media threats. In an external face liveness market report compiled by a third-party research firm, the company’s Oz Liveness module was described as ISO 30107-3 certified at Levels 1 and 2 following testing by NIST-approved laboratories, and as having achieved 100 percent coverage against both presentation and injection attacks in recent CEN TS 18099 evaluations across web, iOS, and Android environments.
The SOC 2 milestone adds a familiar enterprise assurance layer to that technical story. SOC 2 reports have become a common requirement in vendor due diligence processes for cloud-based security and identity services, particularly where biometric data or other sensitive personal information is processed. While the content of Oz Forensics’ report is only available under request and non-disclosure, the existence of a current Type 2 attestation allows prospective customers to align their own risk assessments with a standardized control framework rather than relying solely on marketing claims or point-in-time certifications.
For financial institutions, telecom operators, and government agencies that rely on remote identity proofing and liveness detection to combat fraud, the combination of strong technical test results and SOC 2 Type 2 reporting can simplify procurement and ongoing vendor management. It also reflects a broader pattern within the biometric verification market, where vendors are pairing ISO and CEN test results with more general-purpose security and privacy attestations in order to address both fraud prevention and compliance obligations.
Sources: Oz Forensics Trust Center, Oz Forensics LinkedIn
—
By the ID Tech Editorial Team
