ID.me Startup Diligence Report
ID.me appears to be a differentiated digital identity platform with real public-sector, healthcare, member-network, and employment-screening relevance, but any investment or acquisition thesis should remain conditional on private validation of revenue quality, structured capital terms, customer concentration, privacy/compliance evidence, and entity/IP ownership.
ID.me Startup Diligence Report
ID.me remains an eligible private-company diligence target in the reviewed public record: a 2025 Series E, active careers pages, current VA integration, and broad product/industry pages support ongoing operations. The strongest public signals are product breadth, government/healthcare relevance, and ecosystem scale; the weakest are audited financial quality, customer concentration, litigation completeness, and named leadership depth.
Public sources show a $2.0B January 2025 valuation anchor, a $67M secondary, a $275M line of credit, and a $65M Series E, but the latest post-money valuation, liquidation preferences, debt covenants, and ownership stack are not public.
Diligence request: Obtain the full cap table, debt documents, investor rights agreements, and any 409A or fairness materials for 2024-2026 transactions.
A public 2023 revenue figure exists, but no audited statements, retention metrics, gross margins, or top-customer concentration disclosures were found.
Diligence request: Request monthly recurring revenue bridges, top-20 customer schedules, NRR/GRR, and audited income statements and cash flows.
Official and company sources show deep public-sector use cases, which creates exposure to procurement cycles, policy shifts, and public scrutiny around identity-verification approaches.
Diligence request: Map revenue by agency and program, renewal timing, termination rights, and any policy/regulatory dependencies for public-sector workflows.
ID.me makes strong consent and biometric-data commitments, but the identity-proofing category faces continued policy scrutiny and the company’s operating compliance cannot be verified from public pages alone.
Diligence request: Review biometric-data governance, deletion exceptions, customer DPAs, privacy-impact assessments, and any complaints, settlements, or regulator inquiries.
CB Insights surfaces multiple well-funded alternatives including Veriff, Jumio, Socure, Incode, iDenfy, and LexisNexis Risk Solutions.
Diligence request: Obtain recent win/loss data, pricing comparisons, and the company’s evidence for differentiated pass rates, fraud capture, and credential reuse.
The public product stack spans wallet, identity proofing, MFA, access management, healthcare, and public-sector compliance, which can increase roadmap, audit, and support complexity.
Diligence request: Request product gross margins, deployment burden by SKU, roadmap prioritization, and audit/control exceptions by compliance program.
Public sources reference both ID.me, Inc. in SEC filings and ID.me, LLC in website copyright notices, which may be normal but requires reconciliation for IP ownership, contracting, and financing diligence.
Diligence request: Request the full legal-entity chart, IP assignments, intercompany agreements, and contracting entities by major customer and product line.
Accessible public sources verified Blake Hall as founder and CEO and showed an active careers page, but did not expose a current executive roster or headcount trend.
Diligence request: Request current org chart, executive bios, functional headcount by location, attrition, and retention/refresh equity plans.
Public financial evidence is meaningful but incomplete: CB Insights exposes 2023 revenue, a January 2025 valuation anchor, and 2024-2025 financing events, while audited statements, the latest post-money value, and detailed capital-structure terms remain private.
partially verified confidence: medium
The review located a public 2023 revenue figure and public 2024-2025 financing signals, but not audited financial statements, quarterly performance, backlog, receivables aging, or gross-profit segmentation.
| date or period | round or event | amount | public investor or context | public valuation signal |
|---|---|---|---|---|
| 2011-2023 | Seed VC II/III/IV, Series A, Series B-II, Series C, Series D | not_publicly_visible_in_accessible_excerpt | CB Insights lists these rounds in the public historical sequence | not_publicly_visible_in_accessible_excerpt |
| 2024-11-25 | Secondary Market | $67M | Ribbit Capital, CapitalG, Viking Global Investors | $130M FY2023 revenue multiple shown; exact valuation gated |
| 2025 | Line of Credit - II | $275M | Ares Management appears on public investor table tied to Line of Credit - II and Series E | $2,000M appears in comparison row context, but term details are gated |
| 2025-09-03 | Series E | $65M | Ribbit Capital, Ares Management, Moonshots Capital, Positive Sum | Latest post-money valuation referenced as September 2025 but gated |
Visible public financing suggests both equity and debt/secondary complexity.
| metric | public signal | verification status | diligence note |
|---|---|---|---|
| 2023 revenue | $130M | verified | Need audited statements, segment mix, and 2024-2026 updates |
| January 2025 valuation | $2,000M | verified | Need methodology, security class, and 409A/common-stock context |
| September 2025 post-money valuation | Referenced, exact value gated | partially_verified | Need Series E term sheet and post-money cap table |
| 2024-2025 operating performance | not_publicly_disclosed | not_publicly_verifiable | Need monthly KPIs, burn, runway, and retention |
Only one revenue year was visible in the accessible public financials page.
This timeline reflects only events visible in accessible public excerpts.
The chart intentionally visualizes gating/opacity as part of the diligence story.
not publicly verifiable confidence: low
No public three-year operating model, pricing assumptions, or capital-expenditure forecast was found in the sources reviewed.
partially verified confidence: medium
SEC and CB Insights show that ID.me is financed through private exempt offerings and later structured/private-market transactions, but the share count, preferences, option pool, and debt covenants remain non-public.
| item | public evidence | implication | gap |
|---|---|---|---|
| Issuer identity | SEC EDGAR shows ID.me, Inc., CIK 0001518117, DE incorporation, VA state location, fiscal year end 1231 | Supports private-company identity and legal-entity diligence starting point | Need full entity chart and contracting entities |
| Investor count | CB Insights says ID.me has 37 investors | Late-stage cap table is likely complex | Need full holder list and ownership percentages |
| Secondary liquidity | $67M secondary market transaction in 2024 | Potential shareholder-liquidity or pricing signal | Need sellers, buyers, and pricing details |
| Entity naming | Privacy Bill of Rights footer says Copyright © ID.me, LLC while SEC lists ID.me, Inc. | Possible multi-entity structure affecting IP and contract ownership | Need intercompany and IP-assignment records |
No public share-count or preference-stack data was visible.
partially verified confidence: low
Publicly accessible evidence was strongest on financing history and weakest on tax positions, accounting policy details, and revenue-recognition mechanics.
Public sources show a broad identity stack that spans consumer wallet, authentication, access management, credential validation, and policy-based identity proofing across multiple regulated workflows.
partially verified confidence: medium
The accessible product pages verify the breadth of the suite and many use cases, but pricing, attach rates, product-level gross margins, and roadmap timing remain private.
| product or solution | audience | public features | verification status |
|---|---|---|---|
| ID.me Digital Wallet | Consumers, agencies, and relying parties | Single login, credential reuse, consent-based data sharing, member access to services and offers | verified |
| Unify Authentication | Enterprises and agencies | Surface listed on network site as part of the platform family | verified |
| Access Management | Enterprises and agencies | Surface listed on network site as part of the platform family | verified |
| Identity Verification | Regulated enterprises, agencies, healthcare, employers | Policy-based orchestration, assurance levels, omnichannel verification, federation back to relying party | partially_verified |
| Credential Validation | Organizations needing attribute proofing | Attribute exchange against sources of truth for employees, contractors, or professionals | partially_verified |
| Login Security | High-risk account workflows | Multi-factor authentication including FIDO/WebAuthn and tokens like YubiKeys | partially_verified |
Pricing and attach rates were not public.
| assurance or policy | public description | example use case | pricing visibility |
|---|---|---|---|
| Community Verification | Service communities such as military/veterans, first responders, teachers, students, nurse/medical, and employee verification | Discounts, benefits, workforce/community gating | not_publicly_disclosed |
| Document Verification / KBA Replacement | Government photo ID verification, OCR text extraction, authoritative-source validation, phone verification | Customer onboarding and fraud reduction | not_publicly_disclosed |
| NIST 800-63-3 IAL2/AAL2 | Certified identity proofing and MFA for unsupervised remote, supervised remote, and in-person workflows | Government and healthcare access workflows | not_publicly_disclosed |
| EPCS and TEFCA-linked workflows | DEA EPCS support and TEFCA/QHIN identity proofing for patient/provider contexts | Healthcare provider and patient access | not_publicly_disclosed |
| Privacy / biometric controls | Consent before sharing, revocation, credential destruction, biometric data not sold; some NIST credential data retained for fraud prevention and government auditing | Privacy-sensitive regulated deployments | not_publicly_disclosed |
Use-case breadth is public; monetization is not.
This diagram is synthesized from public product descriptions and is not a disclosed internal architecture document.
Public sources support broad government, healthcare, retail/member, and employment use cases, but they do not provide a top-customer schedule or direct revenue concentration data.
partially verified confidence: medium
The reviewed public evidence confirms named and categorical use cases across federal agencies, healthcare providers, stores, and employers, but it does not reveal the top 15 customers by revenue or purchase timing.
| customer or segment | public evidence | use case | verification status |
|---|---|---|---|
| U.S. Department of Veterans Affairs | VA says users need an ID.me or Login.gov account to sign in to VA.gov and related services | Veteran account access and MFA/identity-verified sign-in | verified |
| Federal agencies | Homepage says 19 federal agencies trust ID.me for secure identity verification | Government services and benefits access | partially_verified |
| Healthcare organizations | Homepage says 65 healthcare organizations use ID.me; healthcare page says 100,000+ providers leverage ID.me for EPCS | Provider access, EPCS, patient/provider proofing | partially_verified |
| Retail/store ecosystem | Homepage says 600+ stores accept community cards in ID.me Wallet and showcases offers from brands such as Under Armour and Crocs | Member discounts and commerce engagement | partially_verified |
| Employment / screening market | Sterling partnership extended through 2028 for identity-first pre-employment screening | Hiring, background checks, interview-fraud prevention, I-9 workflows | partially_verified |
This table tracks visible ecosystem evidence, not customer-revenue concentration.
This chart is intentionally descriptive, not financial.
partially verified confidence: medium
Strategic relationship evidence is stronger than customer-revenue evidence: the Sterling partnership is explicit, public-sector/shared-service narratives are broad, and a Trusted Partner Network exists, but revenue-sharing and exclusivity economics are not public.
| relationship or dependency | public evidence | risk or gap | source type |
|---|---|---|---|
| Sterling exclusive partnership | Exclusive agreement extended through July 2028 | Need ARR contribution, exclusivity scope, and termination rights | partner press release |
| State workforce agencies | Public-sector page says multiple state workforce agencies credited ID.me with preventing billions in unemployment fraud | Need named agencies, contract terms, and concentration | company source |
| California state agencies | Compliance page says multiple California state government agencies use the service for identity proofing/authentication | Need named agencies and revenue contribution | company source |
| Trusted Partner Network / partner directory | Network site exposes a partnership directory and partner-network navigation | Need partner list and partner-sourced pipeline metrics | company source |
| Authentication standards and tokens | Compliance page cites FIDO WebAuthn and tokens like YubiKeys | Need actual component-vendor concentration and SLA exposure | company source |
Critical cloud/component suppliers remain undisclosed.
not publicly verifiable confidence: low
The sources reviewed did not disclose revenue by customer or identify any customer contributing 5% or more of revenue.
not publicly verifiable confidence: low
This review did not find a structured public disclosure of recently severed customer, partner, or supplier relationships.
not publicly verifiable confidence: low
Public sources expose standards, protocols, and partner surfaces, but not a ranked supplier list or cloud/vendor concentration.
CB Insights public comparison surfaces a crowded identity-verification field; ID.me's main public differentiation appears to be public-sector compliance plus a reusable member/wallet network.
partially verified confidence: medium
Public evidence supports a competition set of identity-verification specialists and risk-data platforms; what remains private is win-rate data, pricing pressure, and how much reusable-wallet scale translates into durable advantage.
| competitor | public description | segment | overlap with idme |
|---|---|---|---|
| Veriff | Identity and document verification, proof of address, age validation, AML screening, biometrics, fraud prevention | Identity verification specialist | Document/identity verification and fraud prevention |
| Jumio | Identity verification, risk assessment, compliance monitoring with automation, biometrics, AI/ML, liveness detection | Identity and compliance specialist | Proofing, biometrics, regulated identity workflows |
| Socure | Digital identity verification and risk decisioning for financial services, government, and e-commerce | Identity + risk decisioning | Government/commercial identity workflows |
| Incode | Deterministic verification, deepfake protection, orchestration, fraud prevention for public sector and enterprise sectors | Identity orchestration | Proofing orchestration and public-sector use cases |
| iDenfy | KYC/KYB/AML with AI and biometric verification | Compliance-focused verification | Fraud prevention and identity proofing |
| LexisNexis Risk Solutions | Data analytics with identity verification, fraud prevention, compliance, and credit-risk support | Risk-data platform | Identity verification and compliance decisioning |
This is a public comparison-set snapshot, not a validated win/loss ranking.
| axis | idme public position | competitor pressure | evidence |
|---|---|---|---|
| Public-sector and regulated-workflow depth | Strong public narrative around NIST, FedRAMP, VA, healthcare, and workforce-agency flows | Specialists and government-capable vendors may still compete on procurement, price, or implementation ease | Company and VA sources |
| Reusable member network / credential reuse | 136M+ members and 30M+ preverified IAL2 users claimed on public pages | Specialists may compete without a wallet network but can emphasize narrower workflows | Homepage and identity-verification page |
| Privacy and consent narrative | Explicit Privacy Bill of Rights and no biometric-sale statement | Rivals may market privacy differently or rely on alternative architectures | Privacy Bill of Rights |
| Employment workflow leverage | Exclusive Sterling extension through 2028 | Competitors may still win direct employer or HR-tech integrations | Sterling press release |
Qualitative scoring only; no public price/win-rate data was found.
This figure is a qualitative positioning aid, not an analyst-scorecard output.
The public footprint suggests a hybrid go-to-market model: consumer/member acquisition, partner-led distribution, and direct sales into regulated government and enterprise workflows.
partially verified confidence: medium
ID.me publicly positions itself across consumer savings and benefits access, public-sector digital identity, healthcare workflows, and employment screening; however, channel economics and CAC efficiency are not public.
| channel or motion | public evidence | buyer or user | gap |
|---|---|---|---|
| Consumer/member acquisition | Homepage and privacy navigation emphasize discounts, cash back, jobs, and government-service access | Consumers, communities, benefit recipients | Need CAC, engagement, and monetization by member cohort |
| Public-sector direct sales/shared service | Public-sector page positions ID.me as a shared authentication and identity-proofing service across agencies | Federal, state, and local agencies | Need procurement cycle, ACV, and renewal terms |
| Healthcare/provider workflow sales | Healthcare page targets providers, EHRs, and patient/provider identity workflows | Health systems, payers, EHR/app partners, providers | Need pricing and compliance-driven sales-cycle data |
| Employment / background-check channel | Sterling exclusive partnership and pre-employment screening narrative | Employers and screening providers | Need partner-sourced revenue split and exclusivity economics |
| Trusted Partner Network / integrations | Network site exposes a partnership directory and product/integration surfaces | Partners and relying parties | Need partner counts, referral mechanics, and API economics |
Public evidence supports channel existence more than unit economics.
| signal | detail | source | implication |
|---|---|---|---|
| Community/discount positioning | Homepage spotlights offers for military, medical providers, first responders, and teachers | Homepage | Consumer/community affinity remains a visible acquisition surface |
| Government/benefits positioning | Privacy and wallet pages emphasize secure access to government and commercial benefits and services | Privacy and wallet pages | Cross-market positioning bridges B2C and B2G narratives |
| Industry-led enterprise positioning | Network site groups solutions into public sector, healthcare, retail/eCommerce, employment/background checks, and financial services | Network site | Verticalized B2B/B2G motion |
| Privacy/trust messaging | Privacy Bill of Rights and homepage emphasize consumer control and no data sale | Homepage and Privacy Bill of Rights | Trust narrative is central to brand positioning |
| Employer-brand signaling | Careers page emphasizes mission, culture, benefits, and equity | Careers page | Recruiting and mission branding are public GTM-support assets for talent |
No public campaign-spend or funnel-conversion metrics were found.
Counts mix dated and undated company claims and should not be used as an operational funnel without management confirmation.
partially verified confidence: low
Major-customer relationship quality cannot be assessed from public revenue data, but official and company sources indicate durable relevance in veteran, healthcare, tax, and employment-adjacent journeys.
partially verified confidence: medium
The clearest public new-business avenues are public-sector logins, healthcare/provider workflows, employment screening with Sterling, and merchant/community-card ecosystem expansion.
not publicly verifiable confidence: low
No public information was found on sales compensation, quota, productivity, or sales-cycle benchmarks.
not publicly verifiable confidence: low
The active careers page, public partner ecosystem, and 2025 financing signals support continued execution capacity, but actual sales-and-marketing budgets are not public.
Public technical sources show investment in identity orchestration, open protocols, MFA, healthcare/public-sector compliance, and omnichannel verification, but engineering headcount and roadmap economics remain private.
partially verified confidence: medium
The accessible public evidence is strongest on technical capabilities rather than org design: orchestration, protocol support, MFA, document and biometric flows, and regulated-workflow compliance are clearly described.
| capability | public evidence | why it matters | gap |
|---|---|---|---|
| Identity orchestration | ID.me orchestrates component vendors and dynamically routes users through proofing flows | Core differentiator if pass rates and fraud capture are strong | Need pass rates, failure modes, and vendor dependency map |
| Open federation protocols | SAML 2.0, OAuth 2.0, and OpenID Connect are explicitly cited | Lowers integration friction for relying parties | Need implementation burden and compatibility matrix |
| Document and biometric proofing | Government photo ID checks, OCR, selfie/PAD, phone verification, multiple evidence types | Critical for fraud prevention and compliance | Need accuracy, bias, appeals, and vendor-component details |
| MFA and login security | FIDO/WebAuthn and tokens like YubiKeys are listed | Important for account takeover resistance | Need adoption metrics and account-recovery policy details |
| Credential and attribute validation | Public-sector and healthcare pages describe validating employees, contractors, providers, and other attributes from sources of truth | Enables higher-value workflows beyond simple proofing | Need source coverage, match rates, and failure-resolution procedures |
This table emphasizes public capability claims, not independent technical validation.
Detailed component vendors and data flows remain private.
partially verified confidence: medium
Pipeline signals are directional rather than complete: public sources mention ongoing omnichannel/in-person verification work, interview-fraud and I-9 expansion with Sterling, and continued sector-specific compliance support.
| initiative or signal | public status | public date or context | risk or gap |
|---|---|---|---|
| Interview-fraud solutions | Planned/expanding with Sterling | 2023 press release | Need shipped status, adoption, and economics |
| I-9 document verification | Planned/expanding with Sterling | 2023 press release | Need product readiness and compliance scope |
| In-person and omnichannel verification | Current capability with evolving compliance references | Identity-verification page | Need current certification status and operational scale |
| TEFCA/QHIN and patient-access workflows | Current healthcare use case | Healthcare and compliance pages | Need customer count, attach rate, and roadmap dependencies |
| Roadmap cost and deprecation risk | not_publicly_disclosed | No public roadmap artifact located | Need cost of development, sunset plans, and technical debt review |
Forward-looking items are sourced from public statements, not management forecasts.
Accessible public leadership detail is thinner than product or market detail: Blake Hall is publicly named as founder and CEO, while the broader current org chart and headcount need direct confirmation.
partially verified confidence: medium
A minimal public org picture can be assembled around founder/CEO Blake Hall and standard operating functions, but a complete named org chart was not available in accessible public sources.
| person or role | public signal | source | caveat |
|---|---|---|---|
| Blake Hall — founder & CEO | Named in Sterling partnership press release | Sterling/ID.me press release | Broader executive roster still needs confirmation |
| ID.me, Inc. legal issuer | SEC CIK record with DE incorporation and VA state location | SEC EDGAR | Operating/contracting entities may include other affiliates |
| Current executive roster | Accessible public sources in this review did not yield a complete roster | Public-source limitation | Need current leadership page or company deck |
| Board / committees | not_publicly_compiled_from_accessible_sources | Public-source limitation | Need charter, investor-rights, and committee materials |
Leadership transparency was lower than product transparency in the accessible public record.
Only the founder/CEO node was directly named in accessible public sources during this review.
not publicly verifiable confidence: low
The active careers page signals ongoing hiring and employee-benefit investment, but it does not disclose workforce size or distribution.
| signal | public evidence | implication | verification status |
|---|---|---|---|
| Mission and culture | Careers page says ID.me aims to fix the identity layer of the internet and emphasizes mission-driven culture | Recruiting brand appears mission-centric | verified |
| Healthcare and wellness benefits | Medical, dental, vision, parental leave, life insurance, mental-health resources | Suggests standard late-stage private-company benefits investment | verified |
| 401(k) and equity | 401(k) match and employee equity incentive plan are publicly advertised | Public evidence of long-term retention levers | verified |
| Headcount by function/location | not_publicly_disclosed | Operating leverage cannot be assessed from public sources alone | not_publicly_verifiable |
This table is a public hiring/retention signal table, not a headcount census.
This figure is intentionally a disclosure-gap visualization.
partially verified confidence: low
The accessible public record in this review confirmed Blake Hall as founder and CEO, but did not yield a current accessible executive-biography list.
partially verified confidence: medium
Public personnel evidence is limited to broad employee benefits and compensation-signaling language on the careers page.
partially verified confidence: medium
A public employee equity incentive plan is advertised, but its size, valuation basis, and vesting provisions were not public.
not publicly verifiable confidence: low
The reviewed sources did not expose a public schedule of employee-relations disputes or labor actions.
not publicly verifiable confidence: low
No public turnover dataset or executive-departure schedule was identified in accessible sources.
Legal/public-policy diligence is active rather than complete: the public record supports privacy, compliance, and policy-context claims, but comprehensive litigation, IP, insurance, and contract schedules remain private or uncompiled.
not publicly verifiable confidence: low
This review did not complete a counsel-grade litigation search. CourtListener results showed many generic or agency-context mentions of ID.me verification, but did not by themselves establish a reliable schedule of pending lawsuits against the company.
| search surface | observation | date or context | diligence gap |
|---|---|---|---|
| CourtListener search for "ID.me" | 41 published-opinion results were returned, but many are generic text matches or agency-context references rather than clear corporate-party cases | Search accessed 2026-06-17 | Need party-name and affiliate-name search across docket systems |
| V.D. Corbin v. UCBR (Pa. Commw. Ct. 2026) | Opinion excerpt says claimant was required to verify identity through ID.me | Filed 2026-04-10 | This shows adjudicative context around agency use, not necessarily a suit against ID.me |
| P. Pham v. UCBR (Pa. Commw. Ct. 2025) | Opinion excerpt references completion of an online ID.me identification verification process | Filed 2025-06-18 | Again, contextual mention only; comprehensive litigation inventory still required |
This is not a complete docket review and should not be treated as a no-litigation conclusion.
not publicly verifiable confidence: low
No reliable public schedule of lawsuits initiated by ID.me was assembled from the accessible sources reviewed.
| search surface | observation | status | next step |
|---|---|---|---|
| Accessible public quick search | No reliable public schedule of suits initiated by ID.me was compiled from reviewed pages | not_publicly_verifiable | Run counsel-led docket search using party names and affiliates |
| SEC and company pages | Reviewed sources did not enumerate affirmative litigation or claims schedules | not_publicly_verifiable | Request legal schedule and outside-counsel summaries |
| CourtListener result quality | Text-match results alone are insufficient to infer plaintiff-side litigation posture | inconclusive | Use PACER/Westlaw/Lexis and company affiliate names |
Included to avoid overstating what the public quick search could prove.
partially verified confidence: low
For a digital identity platform, the more material public-safety and liability vectors are cybersecurity, account takeover, privacy harm, and identity misuse rather than traditional environmental exposure.
partially verified confidence: medium
Public evidence is stronger on privacy/compliance trust marks and website copyright notices than on a full patent or trademark schedule.
| asset or signal | public evidence | why it matters | gap |
|---|---|---|---|
| Privacy Bill of Rights / biometric-data commitments | Consent, revocation, credential destruction, and no sale/lease/trade of biometric data are publicly stated | Core legal/regulatory trust surface for the business model | Need operational testing, retention logs, and exception handling |
| Compliance trust marks and standards | Public references to NIST, FedRAMP, ISO 27001, SOC 2 Type II, EPCS, TEFCA, and CCPA-related positioning | Important for government, healthcare, and enterprise procurement | Need underlying certificates, audit reports, and scope statements |
| Entity structure | SEC issuer is ID.me, Inc.; website copyright notice references ID.me, LLC | Could affect IP ownership, contracting, and financing diligence | Need full legal-entity chart and IP assignments |
| Trademark / patent schedule | USPTO TSDR portal is available, but a company-specific portfolio was not compiled in this review | Trademark and patent ownership should be verified directly, not inferred from branding | Need targeted trademark/patent search and counsel schedule |
Compliance/brand signals are public; authoritative IP schedules still require direct retrieval.
not publicly verifiable confidence: low
No public cyber, E&O, D&O, or crime-insurance schedule was found in accessible sources.
partially verified confidence: medium
Public contract evidence is limited to relationship narratives and at least one named partnership extension; most customer, supplier, and government contracts remain private.
partially verified confidence: medium
The clearest public policy signal in reviewed sources is category-level scrutiny of third-party facial-recognition verification, while no company-specific enforcement action was verified from accessible sources.
The timeline includes policy context that affects the category even when it is not a verified company-specific enforcement action.
The heatmap prioritizes diligence urgency, not legal certainty.
| ID | Claim | Status | Sources |
|---|---|---|---|
| EC-ID-001 | ID.me appears to remain privately financed, with SEC browse results showing exempt-offering filings and CB Insights still showing late-2025 private financing rather than a public-market event. | partially verified medium | SRC-ID-002SRC-ID-003 |
| EC-ID-002 | CB Insights publicly lists ID.me's latest funding round as a $65M Series E on September 3, 2025. | verified high | SRC-ID-002 |
| EC-ID-003 | CB Insights publicly shows a January 2025 valuation of $2,000M and notes that the latest post-money valuation is from September 2025, although the exact later figure is gated. | partially verified medium | SRC-ID-002 |
| EC-ID-004 | CB Insights publicly lists ID.me's 2023 revenue as $130M. | verified high | SRC-ID-002 |
| EC-ID-005 | The public financials page shows structured/private-market complexity beyond a simple equity history, including a $275M line of credit, a $67M secondary market transaction, 37 investors, and a historical round list through Series E. | verified medium | SRC-ID-002 |
| EC-ID-006 | ID.me publicly claims 136M+ members, 600+ stores, 65 healthcare organizations, and 19 federal agencies as of November 26, 2024. | partially verified medium | SRC-ID-001 |
| EC-ID-007 | ID.me publicly says it never sells user data and frames the wallet as a single login that lets users control where data is shared. | partially verified medium | SRC-ID-001SRC-ID-005SRC-ID-006 |
| EC-ID-008 | ID.me's Privacy Bill of Rights states that users control their data, must consent before sharing, can revoke access, can destroy credentials, and that the company does not sell, lease, or trade biometric data, while retaining some NIST-related credential data for fraud prevention and government auditing purposes. | partially verified medium | SRC-ID-012 |
| EC-ID-009 | The ID.me Network homepage lists Digital Wallet, Unify Authentication, Access Management, Identity Verification, Credential Validation, and Login Security, and groups solutions into public sector, healthcare, retail/eCommerce, employment/background checks, and financial services. | verified high | SRC-ID-007 |
| EC-ID-010 | The identity-verification page describes policy-based orchestration, multiple assurance levels, federation via SAML/OAuth/OIDC, and more than 30 million Americans already verified at NIST IAL2 with ID.me Wallet. | partially verified medium | SRC-ID-008 |
| EC-ID-011 | The regulatory-compliance page publicly represents support for NIST 800-63-3 IAL2/AAL2, FIDO/WebAuthn and YubiKeys, FedRAMP, ISO 27001, SOC 2 Type II, DEA EPCS, TEFCA/QHIN workflows, and CCPA-related use cases. | partially verified medium | SRC-ID-009 |
| EC-ID-012 | The public-sector solutions page positions ID.me's Digital Wallet as a shared service across agencies and says multiple state workforce agencies credited ID.me with preventing billions of dollars of unemployment fraud. | partially verified medium | SRC-ID-014 |
| EC-ID-013 | The healthcare solutions page says more than 100,000 providers leverage ID.me for EPCS and describes healthcare workflows tied to patient portal proofing, payer interactions, TEFCA, HIPAA-sensitive onboarding, and provider/contractor verification. | partially verified medium | SRC-ID-015 |
| EC-ID-014 | The Sterling partnership press release says the firms extended an exclusive agreement through July 2028, described their identity-first employment-screening solution, and reported that more than 1 in 3 job candidates have already confirmed identity with ID.me because of the network's 100M+ verified Americans. | partially verified medium | SRC-ID-011 |
| EC-ID-015 | CB Insights accessible public competitor text surfaces Veriff, Jumio, Socure, Incode, iDenfy, and LexisNexis Risk Solutions as relevant comparison points, each offering overlapping identity-verification, fraud, and compliance capabilities. | verified high | SRC-ID-016 |
| EC-ID-016 | The careers page presents a mission-driven employer brand and advertises medical, dental, vision, parental leave, 401(k) matching, life insurance, mental-health resources, and an employee equity incentive plan. | verified high | SRC-ID-004 |
| EC-ID-017 | The IRS publicly announced a transition away from using a third-party service for facial recognition in creating new online accounts, highlighting policy sensitivity around facial-recognition-based identity verification. | verified medium | SRC-ID-013 |
| EC-ID-018 | Public sources reference both ID.me, Inc. and ID.me, LLC, implying a multi-entity structure that should be reconciled during legal and IP diligence. | partially verified medium | SRC-ID-003SRC-ID-012 |
| EC-ID-019 | The VA officially describes ID.me as a non-government account provider that contracts with government and non-government organizations and continues to support it as one of two secure sign-in options. | verified high | SRC-ID-010 |
| EC-ID-020 | A quick CourtListener search for "ID.me" returned 41 published-opinion results, including 2025-2026 unemployment-benefit appeals that mention ID.me verification, which shows adjudicative context around agency use but not a reliable company-party litigation schedule. | verified medium | SRC-ID-017 |
| EC-ID-021 | The USPTO TSDR portal is an authoritative trademark-status source, but a company-specific ID.me trademark or patent portfolio was not compiled from accessible public pages in this workflow. | not publicly verifiable low | SRC-ID-018 |
This report is a public-evidence diligence snapshot, not investment advice. Important financial, legal, technical, and contractual facts remain non-public and should be verified directly with management and primary documents before any investment decision.