Step Up Only When Risk Demands It
Trigger stronger verification only when risk signals call for it, so trusted customers and employees move in seconds while suspicious sessions receive deeper checks.
For Teams Pursuing FedRAMP High (Class D)
FedRAMP High IAL3
Identity Proofing at Your
Office or Home, No Travel
Controlled IAL3 Kits ship to an approved home or office in 50 states and 32+ countries. A trained agent attends every NIST SP 800-63A-4 IAL3 session, and you receive a signed evidence package your independent assessor can review. Need someone started today? Run IAL2 now and complete IAL3 when the kit arrives.
Verified reviews on Gartner Peer Insights · SOC 2 Type II · ISO 27001 · $100K bypass challenge: 0 successful bypasses as of October 2026
Enterprise Proof
Built for Enterprise Security and Compliance Teams
Powering over 1 million verifications for regulated teams across 32+ countries, with 200+ controlled IAL3 proofing devices in the field.
SOC 2 Type II (opens in a new tab)
ISO 27001 (opens in a new tab)
Built to NIST SP 800-63A-4 IAL3
API-first deployment
- Fintech
- Federal contractors
- Marketplaces
- SaaS
- Healthcare
“IAL 3 Identity Proofing Full Ecosystem”
Software industry · IAL3 for a FedRAMP High authorization
“Identity Verification Process Visibility And Customer Support Highlighted As Key Features”
Software industry · 250M–500M USD firm
“Able To Have Our Engineers Cleared Quickly”
Software industry · 500M–1B USD firm
Trusted by enterprises selling into U.S. defense & federal agencies, including
U.S. Army
U.S. Navy
DHS
DOJ
DOE
VA
Choose Your Path
FedRAMP High IAL3, From Your Starting Point
- NIST IAL3 identity proofingAttended sessions on controlled kits and kiosks, built for FedRAMP High (Class D).
- Federal programs and contractorsIAL2 and IAL3 for agencies, primes and suppliers.
- What is NIST IAL3?The SP 800-63-4 requirements, explained.
- Choosing an IAL3 providerCriteria for FedRAMP High buyers.
- IAL3 Kit coverageAll 50 states and 32+ countries.
- Preparing for your assessorThe FedRAMP High IAL3 evidence checklist.
Start reading: the SP 800-63-4 IAL3 conformance criteria, FedRAMP High Rev. 5 IAL3 requirements and FedRAMP 20x Class D readiness.
How It Works
NIST IAL3 in Three Steps: Kit, Attended Session, Evidence
Three steps from a risk signal to a signed evidence package, with no trip to a fixed counter.
-
Route by Risk
Trusted users clear low-friction KYC or KYE checks in seconds. Policy rules escalate high-risk customers, remote hires, and privileged users to attended proofing automatically.
-
Ship the Kit, Run the Session
An IAL3 Kit arrives at the home or office. A trained Trust Swiftly agent attends the live NIST SP 800-63A-4 IAL3 session, validates the passport chip over NFC, and verifies the biometric match.
-
Receive Signed Evidence
Every session produces a signed evidence package mapped to NIST validation and verification requirements, ready for your independent assessor, internal audit, or binding to an AAL3 credential.
Planning NIST IAL3 for a FedRAMP High (Class D) program?
Talk to an IAL3 SpecialistAdaptive Verification for Everyone. NIST IAL3 for the Cases That Matter.
Apply the right assurance level at the right moment: seconds-long checks for trusted users, attended IAL3 proofing when risk or regulation demands it.
KYC, KYE, and Workforce Identity in One Platform
Cover customer onboarding, employee and contractor verification, AML, age assurance, insider-threat screening, and regional policy requirements with configurable controls.
Evidence Your Assessor Can Review
Capture decisions, approvals, device context, and artifacts in a signed package mapped to NIST validation and verification requirements.
Attended FedRAMP High IAL3 Proofing
Run attended NIST SP 800-63A-4 IAL3 sessions with biometric liveness, NFC passport chip reads, and controlled hardware shipped to high-risk customers, employees, and privileged users.
High Assurance
FedRAMP High IAL3 Proofing, Delivered to the Desk
For elevated-risk customers, remote hires, and privileged users, deploy attended NIST SP 800-63A-4 IAL3 proofing on controlled hardware with traceable evidence and assessor-ready operating controls, built for FedRAMP High (Class D) under FedRAMP 20x.
- Attended by Trained Agents: Every session is attended live by a trained Trust Swiftly agent, on an IAL3 Kit at an approved home or office, or at an Office Kiosk.
- What We Believe Is the Largest Dedicated IAL3 Fleet: More than 200 IAL3 Kits ship to homes and offices across all 50 US states and 32+ countries, so nobody travels to a counter.
- Cryptographic Evidence: NFC passport chip reads, hardware-backed capture, and AAL3 credential binding strengthen every document and biometric check.
Integrations
Integrate with Your IAM, Risk, and Compliance Stack
Connect identity decisions to IAM, fraud tools, HR systems, CRMs, and internal review workflows through APIs and webhooks.
- API-First Architecture: Use REST APIs and webhooks to route decisions and evidence into existing systems.
- Enterprise Access Controls: Apply SSO, role-based access, and step-up verification policies through your current identity provider.
- Direct Implementation Support: Work with the specialists who build and operate the platform to map controls to rollout, retention, and audit evidence requirements.
Every IAL3 Session
IAL3 Evidence Your Assessor Can Test, Wherever Your Users Are
The signed evidence package
Each completed session produces one package, with these fields:
- the proofing outcome;
- evidence validation and verification results;
- presentation attack detection results, conformant to ISO/IEC 30107-3:2023;
- the proofing agent's record and the kit's chain-of-custody record;
- the retained biometric;
- the identifier of the authenticator bound during the session.
Outcomes
Why Enterprise Teams Standardize on Trust Swiftly
Replace fragmented KYC, KYE, fraud, and identity proofing tools with one defensible identity verification workflow.
- Route low-risk users through checks that take seconds and escalate only high-risk events.
- Reach IAL3 for remote employees without travel: kits ship to homes and offices in all 50 states and 32+ countries.
- Stop proxy interviews and fake remote workers before credentials are issued.
- Hand assessors a signed evidence package mapped to NIST SP 800-63A-4.
- Apply different controls by role, geography, and risk tier from one policy engine.
- Protect privacy with purpose-limited collection, retention settings, and customer-owned deployment options.
FAQ
FedRAMP High and IAL3 Questions, Answered
Does FedRAMP High require IAL3?
For Class D (High), FedRAMP's 2026 Rev5 control guidance says authenticators must comply with the most recent NIST Digital Identity Guidelines at IAL, AAL and FAL level 3, so the users in scope need IAL3 identity proofing. FedRAMP High Rev. 5 IAL3 Requirements gives the full answer, control by control.
Can NIST IAL3 be completed at our office or at home, without travel?
Yes. NIST SP 800-63A-4 delivers IAL3 as on-site attended proofing, and the proofing agent may attend through a kiosk or device controlled by the proofing provider (NIST calls it the credential service provider, or CSP). Sessions run at an approved private location, such as a company office or the user's home office, never a public place. Each session runs on a Trust Swiftly-controlled IAL3 Kit or kiosk with a trained agent attending, and kits ship to all 50 US states and 32+ countries.
How long does an IAL3 rollout take, from first call to evidence?
A specialist scopes your rollout within one business day. Each IAL3 Kit then ships to the user's approved office or home, the user picks a session time, and the attended session typically takes 3 to 10 minutes. Every completed session produces a signed evidence package, and the kit goes back on a prepaid label. Need someone started today? Run the IAL2 pathway now, at its own lower assurance level, and complete IAL3 when the kit arrives.
What do you keep after an IAL3 session, and for how long?
SP 800-63A-4 requires the provider to collect and retain a biometric sample at IAL3, so each session record keeps one alongside the evidence results. Each customer sets how long its IAL3 evidence is kept, to match its own policy and applicable law. Without customer instructions, the default in our Privacy Policy applies.
What happens if an IAL3 Kit is lost or damaged?
Every kit is tracked in transit both ways and inspected when it comes back, and the inspection is recorded. A damaged kit is removed from service. Kits hold no session data, so a lost kit exposes no proofing records.
Is there an IAL3 certification for providers?
No, as of October 2026. NIST publishes the IAL3 requirements in SP 800-63A-4 but states that it does not conduct certification or conformity assessment against them; agencies and assessors evaluate each provider directly. We give your assessor the IAL3 conformance mapping under NDA and a signed evidence package for every session.
What if a user misses their IAL3 session?
They pick a new time in the Trust Swiftly user portal and can reschedule without involving HR or security. A trained agent attends whichever session they choose.
Do you also handle standard KYC and workforce verification?
Yes. The same platform runs low-friction KYC for customers and KYE for employees, contractors, and remote IT staff, with document, biometric, phone, email, address, and device checks that step up only when risk demands it.
FedRAMP High IAL3: Start With a Pilot