At IAL3 level, an agent must attend on-site to examine identity documents and biometric verification. TrustSwiftly’s combination of chat, video, facial recognition with liveness detection and document authentication to achieve this level of assurance reduces both cyber liability insurance premiums and operational expenses by decreasing password resets.
Achieving IAL3
NIST 800-63A IAL3 Digital Identity Guidelines provide a core framework for identity proofing, authentication and secure federated ID management. Since 2025 and the release of SP 800-63-4 as guidance document, these requirements have evolved to a risk-based DIRM process taking into account both enterprise risks and user impacts.
Revised standards emphasize the significance of comprehensive identity proofing and strong phishing-resistant authentication protocols. These protocols may include using multifactor authentication (MFA), device-bound and syncable passkeys, recognising mobile driver’s licenses as verifiable credentials and creating subscriber wallets.
The new requirements also introduce a notional evidence strength classification called STRONG+1 that allows multiple forms of identity proof to be combined to reach higher assurance levels, helping reduce the burden of proving identity at a high level by offering alternative pathways for verifying IAL3. NIST recommends that these alternate pathways meet minimum requirements outlined below in Table 1.
Document Verification
With our user-friendly self-verify tool, customers can capture face and document evidence on any Windows, Apple or Android device – making for faster deployment than full self-service kiosks and at reduced costs.
Additionally, this solution leverages higher pixel counts and secure connections to minimize threats such as spoofing threats and malware risks, giving criminals difficulty accessing biometric information live.
TrustSwiftly enables organizations to meet IAL3 standards and FedRAMP high compliance by strengthening authentication journeys through chat, video, facial recognition with liveness detection, document authentication and step-up reproofing based on risk. This results in reduced cyber liability insurance premiums and operational costs from reduced password resets as well as significantly minimizing hackers’ attack surface. It is fully FIDO certified allowing organizations to meet NIST 800-63A IAL3 requirements by verifying remote identity proofing for IAL2, mobile driver’s license verification as trusted IAL3 identity proofing methods – saving both costs as well as increasing security measures against cyber security risks.
Biometric Verification
NIST establishes standards in multiple business, science and technology areas ranging from plumbing pressure-loss measurements to chemical viscosity measurements. One such area is Identity Assurance Levels which measure how confidently individuals claim that they exist as claimed.
IALs provide organizations with a means of measuring risk, helping mitigate cybersecurity threats and protecting user privacy. While historically used for authentication, their new requirement now opens up opportunities for more complex identity verification strategies.
Remote identity proofing in IAL2 can be accomplished either physically or biometrically by comparing an applicant’s live facial capture with their strongest piece of validated evidence, using liveness detection capabilities to ensure the comparison is not an attempt at spoofing or presentation attacks. Alternatively, CSPs can compare an applicant’s response to KBV questions with responses recorded on their strongest piece of evidence.
Liveness Detection
NIST’s IALs, AALs and FALs remain at the core of modern security but their framework has been significantly modified to incorporate phishing resistance, advocate for hardware-backed authenticators like FIDO Passkeys and support federated identity management. Furthermore, new standards require CSPs to dynamically select appropriate assurance levels based on evidence presented at each step of an authentication journey.
TrustSwiftly’s HYPR Affirm, a FIDO Certified passwordless authentication and comprehensive NIST IAL3 verification solution, helps organizations meet these requirements by strengthening authentication journeys with chat, video, liveness detection facial recognition facial recognition document verification step up re-proofing risk-based reproofing all capable of reaching an IAL2 rating.
HYPR’s ID&V workflows deliver multiple levels of validation strength to reach IAL2, such as using photo IDs or government documents validated remotely, fingerprint comparison and visual analysis against an authenticated photos database for spoofing/fraud prevention purposes. This approach eliminates OTPs/SMS authentication services while significantly decreasing cyber liability insurance costs, operational expenses and attack surface area.
