Jumio review: ID-based age verification from a KYC giant

The age verification laws Jumio tracks

Jumio keeps a reference page on age verification laws, updated in August 2026, covering the US state by state, the UK, the EU and Australia. It notes that roughly half of US states now require some form of age gating, that the Supreme Court upheld Texas’s approach in Free Speech Coalition v. Paxton, and that the UK Online Safety Act has been enforced since July 2025. For a US adult site, the page also restates the one-third adult content threshold set by Texas H.B. 1181 and copied by other states.

How Jumio verifies a visitor’s age

Jumio’s core check reads the date of birth from a government-issued photo ID, calculates the visitor’s age, and matches the face on the ID to a live selfie. Its liveness detection has iBeta ISO/IEC 30107-3 Level 2 conformance, and a premium version adds protection against deepfakes and injected video. Jumio supports more than 5,000 ID types in 200 countries and territories.

To spare most visitors the ID step, Jumio can estimate age from the selfie first and ask for an ID only from people who look young, with under 30 as its own example. The site receives an estimated age and a confidence range, such as 37 within 32 to 40, and applies its own rule: accept, reject or step up to the ID.

Jumio age estimation in NIST testing

NIST’s face age estimation report card for the version Jumio submitted in August 2024 shows how much accuracy depends on the photo:

Webcam images, the closest to a visitor’s selfie, produce the largest errors. On an adult site, Jumio’s estimate needs a wide buffer and a step-up to ID for anyone near the threshold.

UK electoral roll, US DMV and other database checks

Jumio can also check the data against official sources: the UK electoral roll, US state DMV driver’s license records, Mexico’s CURP, Brazil’s Receita Federal, India’s voter database, Australia’s DVS and electoral roll, and registers in Argentina, Chile, Denmark, Sweden and Finland. These lookups add assurance on top of the ID check.

What Jumio keeps from faces and IDs

Jumio commits to destroying biometric data derived from images within three years of submission, unless the law requires a shorter period. When it acts for a site, other personal data is kept as that site instructs, and transactions can be deleted through the API. Jumio also builds an identity graph that links signals and sessions across its customers to spot fraud, a point for an adult site to review with its privacy counsel.

Is Jumio trusted?

Jumio holds ISO/IEC 27001:2022, PCI DSS and SOC 2 Type 2 certifications, but the people it verifies rate it poorly. On Trustpilot, Jumio scores 1.3 out of 5 from 97 reviews, 97% of them one star. The reviewers are people a Jumio client sent to verify, and the latest, from May and June 2026, describe genuine IDs being rejected and support that does not answer. Jumio has not claimed the page. On an adult site, each wrongful rejection is a lost member, so ask for acceptance rates in the demo.

Who owns Jumio?

Jumio is an American company, Jumio Corporation, based in Sunnyvale, California. Centana Growth Partners acquired its assets in 2016, and Great Hill Partners invested $150 million in 2021. Mark Lorion became CEO in April 2026.

Jumio cost and data deletion

How much does Jumio cost?

Jumio publishes no prices. Quotes go through its sales team, and its /pricing page returns a 404.

How do I delete data from Jumio?

Jumio handles access and deletion requests by email at [email protected], and may verify the requester’s identity first. Since Jumio acts for the site that sent the visitor, the visitor can also ask that site. Jumio says it does not sell personal information.

Jumio strengths and limitations