Topic starter
10/06/2026 10:47 pm
TL;DR: Forrester named it a Leader in the Wave Identity Verification Solutions Q3 2025 report, with the vendor also citing 20-second onboarding, 50-plus languages, 14,000 document types, 220-plus countries and territories, and 4,000-plus customers, according to SumSub. The governance question is not ranking alone but how identity verification now sits inside the full customer lifecycle, from onboarding through closure.
Editorial analysis by NHI Mgmt Group, based on content published by SumSub: “Sumsub recognized as a Leader in the Forrester Wave™”.
By the numbers:
- SumSub says it can securely onboard users in just 20 seconds.
- SumSub says it supports 50+ interface languages.
- SumSub says it covers compliance with 220+ countries and territories.
Key questions
Q: How should identity verification teams handle trust after onboarding?
A: They should treat onboarding as the start of trust governance, not the end.
Q: Why do fast identity verification flows sometimes create governance risk?
A: Speed becomes a risk when it replaces assurance rather than supporting it.
Q: What are the signs that an IDV programme is not covering the right population?
A: Common signs are high manual-review rates in specific geographies, repeated fallback to exceptions for certain document types, and uneven customer drop-off across language groups.
Practitioner guidance
- Define where IDV evidence is reused Map which verification outputs can influence login, step-up checks, transaction approval, and account closure so the control is not trapped at onboarding.
- Tier verification by risk scenario Set different assurance levels for crypto, trading, finance, and other regulated flows so friction matches the business action being authorised.
- Test regional document and language coverage Compare your live customer mix with supported document types, interface languages, and jurisdiction coverage to find exception paths before they become manual bottlenecks.
Bottom line: Identity verification should be managed as a lifecycle control that influences more than onboarding if it is to support fraud and compliance objectives.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
25/06/2026 2:30 am
Forrester recognition does not answer the governance question that matters: whether identity verification is being operated as an onboarding feature or as a lifecycle control. A Leader label may reflect market fit and capability breadth, but practitioners still have to decide where verification evidence feeds policy, escalation, and account closure decisions. The material issue is not ranking, but control placement across the identity lifecycle.
A few things that frame the scale:
- Gartner predicts that by 2026, 30% of enterprises will consider identity verification solutions unreliable in isolation because of AI-driven attacks.
A question worth separating out:
Q: How can security teams tell when identity verification is too weak?
A: Look for workflows that rely on one document check, allow recovery without independent signals, or have no step-up path when context changes. If the process cannot distinguish a genuine claimant from someone holding stolen data, it is too weak for high-trust actions.
👉 Read our full editorial: Sumsub’s Forrester recognition and what it means for IDV governance
This post was modified 1 day ago by NHI Mgmt Group