TL;DR: Digital identity verification is increasingly tied to citizen onboarding, reusable credentials and fraud prevention, while also underscoring how governance and trust now sit alongside technical identity controls, according to SumSub’s selection for a History of Parliament publication.
NHIMG editorial — based on content published by Sumsub: New History of Parliament project featuring Sumsub, selected for its digital identity verification work
Questions worth separating out
Q: How should organisations govern reusable identity verification across multiple services?
A: Treat reusable verification as a controlled trust assertion, not a blanket pass.
Q: When does digital identity verification create more risk than it reduces?
A: It creates more risk when organisations optimise for speed without setting assurance thresholds, expiry rules or exception review.
Q: What do security teams get wrong about citizen onboarding identity controls?
A: They often treat onboarding as a one-time check instead of a lifecycle decision.
Practitioner guidance
- Define assurance tiers for onboarding Separate low-risk, medium-risk and high-risk journeys before selecting verification methods, then match evidence collection and review thresholds to each tier.
- Set expiry rules for reusable credentials Document when a verified identity assertion can be reused, what event invalidates it, and which services are prohibited from accepting it without revalidation.
- Link fraud signals to IAM decisions Connect anomaly detection, device intelligence and exception handling to access policy so suspicious identities can be blocked before account issuance.
What's in the full analysis
Sumsub's full article covers the operational detail this post intentionally leaves for the source:
- How the company positions Non-Doc Verification and reusable identity credentials in practice
- The publication context and why the History of Parliament project selected Sumsub
- The exact framing of its identity verification work by named academics and media leaders
- The broader explanation of how the book links leadership, governance and public trust
👉 Read Sumsub's feature on digital identity verification and public trust →
Digital identity verification: what it means for trust and governance?
Explore further
Identity verification is now a governance problem, not just an onboarding feature. The article frames Sumsub's work as part of a broader discussion about authority, recognition and trust. That matters because identity proofing decisions increasingly determine who gets access, which records are trusted and how reusable credentials travel across systems. For practitioners, the real question is whether assurance policy is explicit enough to survive scale.
A few things that frame the scale:
- 96% of organisations store secrets outside of secrets managers in vulnerable locations including code, config files, and CI/CD tools, according to Ultimate Guide to NHIs.
- Only 5.7% of organisations have full visibility into their service accounts, which shows how incomplete identity inventory can undermine governance decisions, according to Ultimate Guide to NHIs.
A question worth separating out:
Q: How do IAM and fraud teams work better together on identity proofing?
A: They need shared policy for evidence quality, risk scoring and escalation. IAM controls decide what access is granted, while fraud controls surface suspicious patterns before or after issuance. When those teams operate separately, weak proofing can look compliant even while fraud risk is increasing.
👉 Read our full editorial: Digital identity verification, trust and governance in public onboarding