Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Our comments to NIST: AI agent security starts with human identity verification

AI agents have developed advanced capabilities faster than most would have imagined. In enterprise contexts, workforces are delegating more and more tasks to them. While the promise of increased productivity is enticing, the shift from deterministic automated tools to agentic autonomous systems introduces security risks that most enterprises haven’t prepared for.

Introducing Persona's Workday Recruiting integration for candidate verification

Imagine spending weeks moving a strong job candidate through a rigorous interview process. The hiring manager is excited for their new hire and collaborates with multiple teams to prepare for a smooth onboarding. But on day one, a completely different person shows up for the job. For too many companies, scenarios like this have become disturbingly common. Besides introducing serious security risks, fake job candidates waste valuable talent team resources.

Tranche 2 Australia: Who's affected and how to comply

On 1 July 2026, Australia's Tranche 2 reforms take effect. If you're a lawyer, accountant, real estate agent, conveyancer, precious metals dealer, or trust and company service provider, this deadline likely applies to you. Tranche 2 extends Australia's AML/CTF obligations to approximately 100,000 businesses that were previously unregulated.

Persona attains FedRAMP Moderate Authorization status

Persona’s FedRAMP Moderate Authorization status gives federal agencies a secure and highly configurable option for verifying users, preventing fraud, and securing digital services. The US Government Accountability Office (GAO) estimates the federal government loses $233 billion to $521 billion to fraudsters annually. And many agencies are facing a significant challenge as they modernize their digital operations.

TEFCA compliance for digital health companies: a guide to identity proofing

In 1996, the US signed the Health Insurance Portability and Accountability Act (HIPAA) into law. One of the government’s chief goals was to safeguard sensitive patient data and protected health information (PHI) from unauthorized disclosure. While these protections were critical, HIPAA compliance requirements (alongside an already-fragmented electronic health record systems) have led to ongoing data silos across healthcare.

Introducing early access for Case Review Agents: AI decisioning for high-stakes identity decisions

Every day, your review team makes hundreds of decisions that determine who gets access to your platform. These decisions carry a lot of weight. Get them right, and you protect your business while delivering a seamless user experience. Get them wrong, and you either block legitimate users or open the door to fraud. As your business scales, these decisions get harder to manage. Case volume climbs, fraud tactics shift, and regulatory expectations evolve.

The DEA telehealth extension: how to prepare for new patient identity verification requirements

On December 31, 2025, the DEA issued its fourth temporary extension of the COVID-era telemedicine flexibilities, keeping the current rules in place through December 31, 2026. For telehealth companies prescribing controlled substances, the extension was welcome news.

Partnering with Chainlink to bring reusable identity to on-chain finance

Every day, financial institutions move trillions of dollars on-chain. From tokenizing money market funds to settling trades on private blockchains, financial institutions are swiftly bringing capital on-chain. But the infrastructure for compliance hasn't kept up. It’s not uncommon for investors to verify for KYC multiple times just to trade across chains.

Introducing Atlas: a global age regulation tracker

Over 300 age-related bills were introduced across several US states in 2025 alone. We’ve heard firsthand from numerous legal and compliance teams that keeping up with these regulations is incredibly overwhelming. That’s why we developed Atlas, a global database tracking evolving age assurance regulations. Atlas tracks recent legislation impacting social media platforms, adult content, age-restricted services, and other related legislation.

Who's behind the agent? Security, trust, and compliance in agentic payments

We’ve been collaborating with others to explore how agentic commerce and enterprise agents will work. Alfonso Gómez-Jordana Mañas, co-founder of Crossmint shares his thoughts on the current state of payment security and how compliance mechanisms like KYC and AML need to evolve to support agentic commerce. OpenClaw provided users with an open-source framework to launch AI agents.