Veridas Earns CEN/TS 18099 High-Assurance Certification
The certification tests injection attack detection against the European Committee for Standardization's new identity-system standard.
Updated on Nov. 10, 2026 in Cybersecurity
Veridas's injection attack detection technology was certified to the High Level of Assurance under CEN/TS 18099 after testing by France's CLR Labs. The testing used deepfakes and artificially generated videos to probe the system's resistance to injection attacks.
Why it matters
The certification gives Veridas a formal credential as new anti-money-laundering regulations take effect and institutions look for verified fraud defenses. It also reflects the wider industry effort to define what counts as an effective injection attack detection system.
CLR Labs tested Veridas's system under the laboratory's specified conditions, including sophisticated injection attacks built from deepfakes and artificially generated videos. The certification is the High Level of Assurance under CEN/TS 18099, the first official testing methodology for identity-system resistance to injection attacks.
The players
Veridas
Veridas is a European identity verification company whose injection attack detection technology earned the High Level of Assurance under CEN/TS 18099.
CLR Labs
CLR Labs is a French testing laboratory that evaluated Veridas's technology and has also certified other vendors to the same standard.
European Committee for Standardization
The European Committee for Standardization is the body that published CEN/TS 18099, the technical specification for testing injection attack resistance.
Fourthline
Fourthline is an identity verification firm that completed a merger with Veridas to create a combined identity verification and fraud prevention business.
The details
CEN/TS 18099, published by the European Committee for Standardization, is the first official method for evaluating how identity systems resist injection attacks. Veridas says it is positioning the certification to become a preferred identity leader, while peers such as Innovatrics, ShareID, HyperVerge, Idemia Public Security and Advance.AI have also pursued testing against the standard.
Timeline
September 2026: CLR Labs certified ShareID to high-level compliance.
October 2026: HyperVerge completed BixeLab injection attack detection testing aligned with CEN/TS 18099.
November 2026: Veridas and Fourthline completed a merger, and CLR Labs certified Innovatrics to the high level of the standard.
July 10, 2027: Financial institutions must have a compliant AML workflow operational.
The Tech Race
Veridas's certification is among the first to be issued under CEN/TS 18099, the first official testing methodology for identity-system injection attack resistance. Competitors including Innovatrics, ShareID, HyperVerge, Idemia and Advance.AI are pursuing the same benchmark as the standard becomes the reference for the sector.
Banks and fintech apps that onboard customers remotely are expected to adopt verified injection attack defenses before the 2027 deadline. Customers may notice more frequent identity checks as providers adopt certified systems.
The takeaway
Verified fraud defenses are becoming a baseline requirement, so identity providers that can show independent certification will likely win institutional business. Organizations should ask vendors for evidence of CEN/TS 18099 testing before the compliance deadline arrives.
What happens next
Financial institutions face a July 10, 2027 deadline to have compliant anti-money-laundering workflows operational under the new regulations.
Further reading
For related coverage of threats and defenses against identity fraud, see Cybersecurity.
Source note: This article includes information reported by Biometric Update.
