Persona, Incode and Veratad Join OpenAge Initiative as Age Assurance Shifts Toward Reusable Credentials

Persona, Incode and Veratad have joined the OpenAge Initiative, an industry effort to build privacy-preserving, interoperable age assurance that can work across services and jurisdictions. OpenAge said the additions follow earlier commitments from Meta and Socure, and reflect a shift in how platforms and identity providers are thinking about age checks: as baseline trust infrastructure rather than a bespoke compliance feature.

“The conversation has moved on from whether age assurance is needed to how it can be delivered responsibly at internet scale,” OpenAge’s Julian Corbett said.

At the center of the initiative are AgeKeys, which OpenAge describes as a reusable age credential designed around open standards and “double-anonymity” principles. The model is intended to let users verify age once with a participating provider and then reuse that age signal with services that accept AgeKeys, without repeatedly submitting identity documents or exposing unnecessary personal data.

OpenAge says AgeKey is built on FIDO2 passkey technology and can support multiple age-assurance methods, including facial age estimation, credit-card checks and government-ID verification. The approach lands amid a broader push for privacy- and risk-based age assurance, reflected in the recent publication of ISO/IEC 27566-1:2025 and growing experimentation with age signals and estimation across major consumer platforms.

In OpenAge’s framing, Persona and Incode add configurable age assurance and identity verification capabilities already used by large digital services. Persona has been positioned as an on-demand verification path in situations where a platform wants an additional assurance step beyond prediction or passive signals, as seen in OpenAI’s recent rollout of under-18 detection in ChatGPT with optional Persona age checks.

Incode, meanwhile, has increasingly emphasized defenses against synthetic identity and injection-style threats that can undermine remote assurance flows, including its Deepsight capability aimed at deepfakes and virtual camera injection. Veratad’s participation extends OpenAge’s network of providers through a model oriented around orchestration and governance of multiple verification methods and credential types, consistent with its work supporting reusable identity acceptance via IDMax and Trinsic.

Momentum for cross-service approaches is also being driven by regulatory pressure. In the U.S., app store and platform compliance obligations remain in flux, while Google has moved to provide developers with Play Age Signals rather than enforcing a universal age gate. In the UK and Europe, online safety requirements continue to accelerate deployment of age checks and estimation approaches, including platform pilots ahead of Online Safety Act enforcement.

OpenAge said the initiative remains open to additional platforms, identity providers and ecosystem partners adopting interoperable, privacy-preserving age assurance.

–

By Ali Nassar-Smith