The identity-tech knowledge base for AI systems and human operators.

Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:

Proof and Superfluid Link Agent Wallet Transactions to Verified Humans

Digital identity network Proof has partnered with Superfluid Finance to integrate verifiable identity credentials into Superfluid Wallet, establishing cryptographic verification for AI agent transactions while keeping private key control with human principals. Under Superfluid’s Human-Factor Authentication architecture, software agents propose specific operations while human users approve them under configured policies, relying on Proof’s audited public certificate authority and NIST Identity Assurance Level 2 proofing rather than treating raw cryptographic signatures or wallet possession as identity evidence. The integration deploys Proof’s x401 open HTTP protocol to challenge agents on both sides of a transaction—allowing merchants to verify that a real person authorized incoming agent purchases without redundant KYC checks, while enabling consumer agents to verify that receiving organizations and their operational representatives possess the legitimate authority to accept funds.

Bangladesh Sets 18-24 Month Timetable for Digital ID Gateway

Bangladesh has established an 18 to 24 month deployment schedule to launch a unified digital identity system serving as the primary gateway to public sector services, according to prime ministerial telecommunications and ICT adviser Rehan Asad at a United Nations side event in New York. Developed alongside the United Nations Development Programme and the Office of the Secretary-General’s Envoy on Technology, the digital public infrastructure initiative incorporates artificial intelligence and integrates Estonia’s X-Road data exchange framework to enable secure, interoperable communication between disparate agency databases. The upcoming rollout advances the country’s proposed One-ID framework under the broader 2026 to 2031 Digital Service Transformation for Access and Resilience project, which aims to consolidate multiple sectoral credentials into a permanent, lifelong digital identity issued from birth.

Canada Opens Privacy Investigation Into IDScan.net Breach

The Office of the Privacy Commissioner of Canada has initiated a formal regulatory inquiry into a significant data breach at identity verification provider IDScan.net, examining the company’s security safeguards and breach notification protocols under the Personal Information Protection and Electronic Documents Act (PIPEDA). Led by Privacy Commissioner Philippe Dufresne, the investigation focuses on an unauthorized database compromise that exposed sensitive customer identification records—including digital scans of driver’s licenses and government ID numbers collected by commercial hospitality and nightlife venues—following reports that stolen identity databases surfaced on the dark-web marketplace Nexus. Operating alongside an active FBI inquiry, Canadian privacy officials are assessing IDScan.net’s compliance with statutory data-protection requirements and evaluating the effectiveness of credit-monitoring remedies provided to affected Canadian citizens.

Authsignal Adds Carrier-Based Number Verification With Aduna

Authentication platform Authsignal has rolled out Number Verify in collaboration with mobile network aggregator Aduna, enabling enterprises to execute carrier-based mobile number verification across ten countries without sending SMS one-time passcodes. Available across millions of subscribers in the United States, Canada, the United Kingdom, France, and Germany, the service leverages direct mobile network APIs for SIM-based and silent network authentication to verify phone possession seamlessly at the cellular infrastructure layer. By embedding carrier-grade signals, SIM-swap detection, and drop-in routing directly alongside passkeys and adaptive multi-factor authentication, the integration eliminates interception and social-engineering vectors inherent to SMS OTPs while preserving frictionless verification within active application workflows.

Okta Expands AI Agent Controls and Forms Blueprint Alliance

Okta has made three AI agent governance tools generally available and co-founded the Blueprint Alliance alongside 11 enterprise software leaders to establish an open reference architecture for autonomous agent security. The newly deployed capabilities—Agent SSO, Agent-to-Agent Connections, and Resource Access Certifications—replace static, long-lived API keys with short-lived tokens, establish auditable interaction chains, and automate recurring permission reviews to eliminate privilege creep across enterprise systems. Forming the industry alliance with partners including Amazon Web Services, Google Cloud, CrowdStrike, Databricks, Docker, Proofpoint, Salesforce, ServiceNow, Wiz, and Zscaler, Okta is actively developing an inline Agent Gateway, unmanaged endpoint agent discovery, and an enterprise kill switch capable of revoking active agent tokens and terminating running processes in real time.

Login.gov Adds Mobile Driver’s Licenses as Identity Proofing Option

The U.S. General Services Administration has expanded its public-facing identity platform by accepting mobile driver’s licenses for identity proofing stored in Google Wallet and Samsung Wallet for accessing federal and state public services. Available as an optional digital pathway alongside physical driver’s licenses, state IDs, and U.S. passports, the integration utilizes cryptographic verification to ensure mobile credentials remain untampered while allowing citizens to selectively disclose only necessary attributes rather than submitting full document images. The implementation enhances protection against counterfeit physical IDs and AI-generated deepfakes, directly supporting federal agency compliance ahead of the Office of Management and Budget’s two-year mandate for public-facing Login.gov adoption.

Discord Begins Global Age Assurance Rollout With New Verification Options

Communications platform Discord has initiated a global rollout of its revised age assurance architecture, deploying a predictive model capable of estimating account age from platform behavioral signals for more than 90 percent of its user base without requiring active identity submission. Excluding the United Kingdom and Australia, the automated system classifies accounts into adult, teen, or unconfirmed tiers based on server affiliations and usage patterns without inspecting private message content, restricting unverified profiles from age-gated communities. For users seeking to unlock restricted spaces or appeal classifications, the platform has integrated external verification routes including on-device facial age estimation, Stripe-backed credit card checks through k-ID, digital passport ID passes via Google Wallet, reusable AgeKey credentials, and document-matching checks powered by Veratad.

Baselayer Raises $35 Million and Launches AI Agent Identity Suite

Financial fraud prevention firm Baselayer has secured $35 million in Series A funding led by M13 and unveiled its Agentic Identity Suite for transaction verification, providing enterprise rails to verify the identity, human representation, and delegated authority of autonomous software agents. Supported by investors including Torch Capital, Picus Ventures, Afore Capital, and Socure’s Matt Thompson, the startup is expanding its reach across more than 2,300 banks and payment processors to build an interoperable trust fabric and shared fraud consortium targeting agentic workflows. By establishing verification standards alongside ecosystem partners like FIS, Prove, Socure, and the FIDO Alliance, the architecture validates that transactions executed by autonomous software remain cryptographically bound to authorized human principals and genuine enterprise counterparties.

TEU Expands Face-Only Bus Boarding for Older Passengers in Southern Brazil

Public transportation network TEU has launched biometric bus boarding across the Porto Alegre metropolitan region in southern Brazil, introducing face-only validation for older passengers across 1,031 transit vehicles in six municipalities. Developed by mobility technology provider TACOM over a 30-month integration cycle, the contactless system allows registered riders aged 65 and older to select facial biometrics on onboard validators, cross-referencing live face captures against a centralized database in real time to unlock turnstiles without physical transit cards. The municipal expansion across Alvorada, Cachoeirinha, Gravataí, Sapiranga, Sapucaia do Sul, and Viamão follows a pilot involving 3,500 enrolled seniors and 18,000 completed boardings, operating in full compliance with Brazil’s General Data Protection Law without sharing biometric data with outside third parties.

Ohio Moves NEC Biometric Identification System to Azure Government Cloud

The Ohio Bureau of Criminal Investigation has partnered with the state Attorney General’s Office to migrate its statewide biometric identification platform to NEC Integra-ID 7 software as a service hosted within Microsoft Azure Government Cloud. The nine-month cloud modernization replaces an on-premises deployment, shifting more than six million multimodal biometric records—encompassing fingerprints, palmprints, and mugshots—onto a CJIS-compliant cloud infrastructure with guaranteed domestic data residency. Serving nearly 600 connected livescan systems across local law enforcement, eight municipal fingerprint networks, and the FBI’s Next Generation Identification system, the platform leverages NEC’s everBlu update framework to deliver continuous algorithm enhancements and post-quantum cryptographic patches without disrupting criminal investigation operations.

–

By the ID Tech Editorial Team