Ensuring identity proofing services compliant with ETSI technical standards

Obserwatorium biz » Case study

IDENTT and Obserwatorium.biz

Positive audit outcome – ensuring identity proofing services compliant
with ETSI technical standards

IDENTT is a leader in digital identity verification. It supports companies in securely and rapidly verifying customer data. It also enables the combination of document analysis with facial biometrics, helping prevent fraud and identity theft. IDENTT’s services are used by financial institutions, telecommunications operators, and e-commerce companies that prioritize security and efficient customer onboarding.

TASK

We have been cooperating with IDENTT for over 5 years, during which time we have repeatedly supported the company with our expert knowledge and advisory services. One of the key engagements within this cooperation involved supporting compliance with ETSI standards, which define requirements for identity proofing service providers. As Obserwatorium.biz, we focused on analyzing and aligning IDENTT’s processes with the requirements of ETSI EN 319 401, ETSI EN 319 411-1, and ETSI EN 319 411-2. A key aspect of the project was adapting identity verification scenarios and policies to meet the requirements of the new ETSI TS 119 461 standard. Our cooperation included, among others:

  1. Initial workshops – we conducted workshops aimed at deepening the IDENTT team’s understanding of regulatory and normative requirements. We identified key gaps and areas for improvement in the context of remote identity verification services.
  2. Organizational environment analysis – we reviewed the existing information security management system to assess its integration and alignment with ETSI requirements.
  3. Definition of roles and responsibilities – together, we developed a service management model covering both governance and operational layers, ensuring business objectives could be achieved while maintaining the highest security standards.
  4. Documentation and security processes – we developed a complete set of documentation required for the audit, including service policies, operational procedures, and support in the risk analysis process. The processes were designed to ensure auditability and compliance with applicable standards.
  5. Advisory support – we conducted a series of expert consultations, enabling the IDENTT team to acquire the necessary knowledge and practical guidance to effectively prepare for the compliance audit.
  6. Audit support – in cases of questions raised by the external auditor, our team remained fully available, providing clarifications and support at every stage of the process.

RESULTS

Thanks to close cooperation at every stage of the project, the key objective was achieved: a successful audit outcome. The remote identity verification service of IDENTT received a positive compliance assessment against ETSI EN 319 401, ETSI EN 319 411-1,ETSI EN 319 411-2 and ETSI TS 119 461 issued by an accredited conformity assessment body. At the same time, a coherent service management model was established, integrating business, security, and compliance dimensions.

“IDENTT provides identity verification services based on identity documents from nearly 200 countries worldwide. By leveraging biometric solutions, it enables financial institutions and trust service providers to onboard customers fully remotely while maintaining an acceptable level of risk. For this reason, it is critical that both the underlying technology and the service management approach comply with applicable standards and regulations.

Cooperation with Obserwatorium.biz enabled the company to receive concrete support in achieving compliance with European standards and best practices. Passing an independent audit confirms the organizational, technological, and operational maturity of the service offered” – MichaÅ‚ Tabor, Partner and Board Member, Obserwatorium.biz

Why IDENTT recommends cooperation with Obserwatorium.biz?

Jan Szajda, CEO of IDENTT: “Cooperation with Obserwatorium.biz is of great importance to our company. We receive not only expert support and up-to-date knowledge in areas such as risk management and trust services, but we also experience a highly positive and constructive collaboration. This allows us to develop our services, design appropriate solutions, and offer our clients exactly what they need – including in terms of regulatory compliance. I highly value working with the Obserwatorium.biz team and can always rely on their valuable support”.