Understanding online identity has never been more important. As of 2022, nearly five billion people globally used the internet, and that number is growing ~6% every year. The average internet user spends nearly seven hours a day online. As more of our everyday interactions are lived online, a host of potential problems arise. Fraud, legal compliance, money laundering, and user safety are just a few of the problems on the rise alongside internet usage. Reported instances of identity theft grew 5x between 2017 and 2021.

As more applications seek to serve the growing online population, companies need tools to better manage these questions of digital identity. That’s where Persona comes in. Persona is an identity platform helping businesses answer identity-related questions about users: Are they a person? Are they who they say they are? Are they authorized to do what they are trying to do? How risky is it to allow them to do what they are trying to do?

Persona is striving to tackle the identity verification market horizontally by providing what it aims to be a flexible and customizable solution. Persona has a wide variety of customers; its user base creates a network effect where, over time, users can verify their identities once on Persona and then easily reverify their identities with all of Persona’s customers (like Coursera, Square, and Postmates). Users thus avoid having to follow a separate, tedious login process for each company, providing an improved internet experience.

Persona was founded by Charles Yeh (CTO) and Rick Song (CEO) in 2018. Before founding Persona, they had been engineers at Dropbox and Square, respectively, where they led their companies’ identity teams. The duo had been friends since 2012 after meeting each other during a summer internship. According to Song, Yeh was the one who first wanted to found a startup and he was the one to steer them toward the identity space.

At Dropbox and Square, Yeh and Song saw firsthand how difficult it was to manage user identity and spent significant efforts internally building their own tooling. They realized that every business managing users online would need similar solutions, leading them to found Persona.

Persona’s core product is a fully-automated identity verification service using machine learning, computer vision, and algorithmic checks, each of which only requires seconds to complete. Persona’s launch of a workflow engine allows customers to pick and choose where in their user’s journey they want to introduce points of verification to minimize risk without introducing significant friction.

That vision has extended from managing a variety of different kinds of identity verification (government ID, social security, bank accounts) to ongoing verifications and reports.

Verifications

The core of Persona’s product is an identity verification engine. Persona can verify a number of different documents including government IDs, biometrics, or Social Security Numbers. The process is fully automated, and the company claims that most decisions take five seconds compared to legacy solutions which can take several minutes. Customers verify that users are real people and are who they say they are. Persona also offers validation of government IDs from over 200 countries and supports 20 languages.

Dynamic Flow

Persona increased the functionality of its verification module by allowing customers to design their customer onboarding process. Customers can select which types of information to collect from its users and determine how strict they will be across different risk segments. Persona has also enabled customers to white-label its product. For example, when you buy alcohol on DoorDash*, you are going through a DoorDash user experience that is powered by Persona.

Source: Digital Native

Depending on the results of the check, customers can dynamically request different levels of information. Suppose a financial platform does a credit check on a potential loan recipient and finds their credit score is below a certain threshold. The platform could then request additional income information to increase its visibility on that user or reject the user as a result of unacceptable levels of risk.

Reports

Source: Persona

Imagine a product like Square Capital. It provides loans to over 100K merchants. Each of those loans requires Square to collect a variety of data, some of it being personal identifiable information (PII) which has to be managed within very strict parameters. Customers like Square also have to manage the threat of potential fraud. Persona built beyond its initial verification product to enable customers to build on-going reports around its users. These reports can pull in data from “global watchlists, adverse media, and email or phone risk reports.”

Cases

When Persona’s customers manage their user bases, they often keep an out for suspicious activity or increased potential risks. As potential issues arise, Persona enables customers to manage cases, like open tickets, where they can conduct investigations into their user’s behavior and figure out if something needs to be adjusted. The product aggregates all relevant information to avoid the need for reviewers to context-switch. Custom templates can also be made for specific types of cases.

Workflows

Source: Digital Native

Persona customers can create automated, customized identity-related workflows. An API trigger, or an event such as verification completion, can initiate the process of Persona pulling in additional data (such as watchlist reports), segmenting users with custom logic, and triggering follow-up actions like resolving a support ticket or opening a case. The workflow tool is a simple drag-and-drop interface that makes it easier for non-technical users to manage a process. The platform allows more customized code to re-write certain phases of a given workflow if the customer wants to, for example, manipulate data as part of that workflow.

Graph

Graph is a tool that helps businesses prevent identity-related fraud such as promo abuse, money laundering, and duplicate accounts. Using a customizable no-code query and link analysis system, Graph provides visibility into risky connections between users that may be hard to detect otherwise. This allows businesses to take a proactive approach to fraud prevention and adapt quickly to new fraud techniques. A primary selling point of Graph is that it does not require any technical expertise to use.

Marketplace

As of May 2023, Persona offers 17 integrations to third-party tools that help its customers manage identity data, fraud detection, bank account data, and blockchain risk, among many other use cases. Any company can apply to list its integration on the Persona marketplace. With this product, they are transitioning from being an identity tool into becoming the first unified identity platform.

Customer

Persona primarily serves the compliance, fraud, and trust & safety teams at companies with large and growing user bases. Its customers often touch financial transactions or engagements, requiring high trust. From verifying renters before giving them the key to making sure delivery drivers are who they say they are, Persona can address many use cases. In particular, customers with ongoing financial relationships (like lenders) or repeat users (like rental marketplaces) benefit from being able to track a user over time and run re-verifications. Persona has a diversified customer base that spans fintech, marketplaces, e-learning, digital health, and cryptocurrency, among other verticals.

For an example of how customers use Persona, Brex is a fintech platform that, in order to comply with know your customer (KYC) and anti-money laundering (AML) regulations and prevent fraud, has to frequently reverify its users. Previously, Brex checked users’ identities manually and required users to enter information across multiple accounts. Persona allows Brex to automatically verify government IDs from around the world.

Another example is MyRent, an online rental marketplace, that uses Persona to prevent fraud. Users can rent everyday items including photography equipment, bicycles, and video game consoles. Identity verification by Persona allows MyRent to avoid fraudulent rentals and provide a Lender Protection Guarantee for a lender’s products up to $1K.

Market Size

The identity verification market is projected to grow from $8 billion in 2021 to over $17 billion in 2026. Some key tailwinds for identity verification include continued internet penetration and increasing emphasis on data privacy. Not only has the number of internet users continued to increase, but the number of applications has exploded moving more of every user’s life online.

Beyond simply having more users to verify, there is a growing demand for consumer applications to more effectively manage data privacy. In 2021 data breaches increased by 23% over the previous annual record. Companies are looking to handle less of their user’s sensitive information and reduce their security liability. The EU’s General Data Protection Regulation (GDPR) imposes fines as high as 4% of a company’s global yearly revenue for data breaches.

As Persona extends beyond data verification and into the broader identity management world, they also expand its addressable market. Managing consumer identity broadly is expected to grow to a $30 billion market by 2030. Rick Song, the CEO of Persona, describes its broader vision this way:

The more effectively Persona can manage that relationship between applications and users, the more Persona becomes a critical piece of infrastructure.

Source: Digital Native

Direct Competitors

Socure, Jumio, and Onfido compete directly with Persona. Socure is the largest of these, having been valued at $4.5 billion in 2021 and with prominent customers like Chime, DraftKings, and Public. In contrast with competitors like Onfido who combine manual and automated review, Persona’s offering is fully automated, providing the potential for greater accuracy but requiring slower review times and greater costs as a trade-off.

Identity Data Aggregators

Alloy and Unit21 are two companies acting as intermediaries to allow customers to access a variety of identity service providers like Equifax and Experian (credit data), ComplyAdvantage (watchlist screening), and Onfido (identity document verification). While Onfido’s identity verification product competes with Persona’s verification module, Onfido is just one of many inputs for Alloy’s workflow tool. Persona's own workflow tool also puts it in competition with Alloy in a way that Onfido does not.

Large Tech Companies

Large tech companies, such as Google, Meta, and Apple, already offer the ability to sign in with a single account on multiple platforms. They have the advantage of already having extensive user bases. For instance, Gmail had over 1.8 billion active users globally as of January 2020. While these platforms manage casual account login, they’re not directly competing in managing underlying identity data like driver's licenses.

All three of these large companies and many others are members of the FIDO Alliance, whose mission is "to reduce the world's reliance on passwords to better secure the web." The FIDO Alliance defines standards for passwordless logins, and Apple released its implementation with Passkeys in iOS 16 and macOS Ventura. Efforts like these indicate the interest of large tech companies in managing user login flows, but they have a ways to go before they’re competing head-to-head with Persona.

Revenue Driver

Persona employs usage-based pricing, charging customers a fee per successful verification regardless of the plan they choose. The Starter plan is free with limited features and customizability. The Growth plan offers a full feature set and more customizability. The Enterprise plan allows for management of multiple organizations, custom development, and custom integrations from the Persona team.

Unit Economics

Persona’s business exhibits attractive unit economics. First, Persona’s fully automated approach to verification allows it to scale cheaply. Second, reverifications increase the LTV of each customer’s user base. Third, Persona’s usage-based pricing results in Persona’s revenue scaling alongside its customers’ user bases.

Some estimates indicate Persona had over 500 customers in 2021 and generated north of $20 million in revenue in that year. By 2023, it had reached an estimated 575 customers and $32 million in revenue. Persona serves a variety of high-profile customers, demonstrating the success of Persona’s horizontal strategy across finance (Brex), healthcare (SimpleHealth), education (Udemy), and HR (Rippling).

Persona raised a $150 million Series C at a $1.5 billion post-money valuation in September 2021, led by Founders Fund. Other investors of the Series C round include Index Ventures (who previously led its Series B earlier in 2021) and Coatue Management (who led its Series A in early 2020). As a point of reference, Persona’s public peers Okta, CyberArk, and ForgeRock have been trading within the 5-7x NTM revenue range since January 2023.

Source: Koyfin

The “AWS” of Identity

With its ease-of-use and customizability, Persona wants to provide the building blocks of every company's digital identity stack. Rick Song, the CEO of Persona, compares those building blocks to what AWS did for compute infrastructure:

While identity verification is a complex problem to solve, it’s one aspect of the entire identity management lifecycle. Persona is strategically positioned because they are already housing verified user data. Its vision extends to managing sensitive user data and becoming a more critical part of companies’ identity infrastructure.

Low Switching Costs

Customers can switch identity verification providers without tremendous difficulty. The co-founder of one existing Persona customer, MyRent, described how such a switch would face three surmountable barriers: (1) Continuing support of Persona until existing users upgrade to the latest version of the app, (2) Exporting data from Persona and mapping it into the format used by the new vendor, and (3) Integrating the new vendor within the app

MyRent’s co-founder estimates the transition would require ~3 months of engineering time, with one month for a backend engineer and one month each for an Android and iOS engineer. In addition, waiting for existing users to upgrade would take approximately 6-9 months, during which time the company would have to pay both Persona and the new vendor.

Persona’s vision of becoming more critical in the identity stack, and expanding to manage user data, would increase the switching costs for their customers.

Persona is building a horizontal solution for companies to manage the identities of a large and growing user base. Their key insight is around customizability and product flexibility. Rather than approaching identity with a monolithic solution, Persona is building a broad platform to extend across the identity management lifecycle.

*Contrary is an investor in DoorDash through one or more affiliates.