CISO Tribune

Vendor comparison · 2 companies

Incode vs OneSpan

Incode is an identity platform that verifies people, businesses and AI agents, with identity verification, deepfake detection, authentication and workforce products. OneSpan sells advanced authentication and fraud prevention products that secure users, devices and applications, together with software that handles agreement preparation, signing and management through secure workflows. CISO Tribune files both under Identity verification. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Incode
  • OneSpan
Incode vs OneSpan: Products, Customers and Funding Compared
IncodeIncode is an identity platform that verifies people, businesses and AI agents, with identity verification, deepfake detection, authentication and workforce products.incode.comOneSpanOneSpan sells advanced authentication and fraud prevention products that secure users, devices and applications, together with software that handles agreement preparation, signing and management through secure workflows.onespan.com
What it sells
  • Identity Verification[3]Document, biometric, and liveness checks in a single flow.
  • TrustGraph[3][18]A trust network that connects people, AI agents, and actions across 700+ enterprises.
  • Deepsight[3][7][10][12][16]Incode's proprietary deepfake and liveness detection engine.
  • Authentication[3]Returning customers sign in with a glance, matched to the identity verified at onboarding.
  • DigipassONE[1][3][14]A unified platform for authentication, transaction security, digital credentials, application protection and analytics.
  • OneSpan Sign[1][9][10][11][12]An eSignature platform built for customer agreements.
  • OneSpan Application Shielding[7]Protects a mobile banking app from the inside out.
  • OneSpan Cloud Authentication[7]Authentication aimed at financial institutions facing the challenges of legacy systems.
  • Cronto[6][7]A passwordless authentication method that requires no manual input from the customer.
  • Digipass FIDO2 security keys[8]FIDO2-certified passkeys that enable passwordless authentication.
  • Intelligent Adaptive Authentication[6]Applies a level of security to each customer interaction.
  • OneSpan hardware authenticators[6]Hardware authenticators for two-factor authentication and transaction signing.
Categories
Headquarters
San Francisco, United States[2]Not stated on its pages
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesPublic (NASDAQ: OSPN)[2][11][16]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • October 14, 2026Incode launched TrustGraph, a privacy-preserving trust network for detecting repeat fraud and agentic fraud across institutions.[18]
  • March 4, 2026Incode secured iBeta Level 3 Presentation Attack Detection conformance for its face liveness technology on iOS and Android.[17]
  • December 2, 2025Incode Technologies announced the launch of Deepsight, an AI defense that detects and blocks deepfakes, injected virtual cameras, and synthetic identity attacks.[16]
  • October 19, 2026OneSpan appointed Megan Shamas as Senior Director of Product Marketing and Matthew Miller as Director of Product Management for its Cybersecurity business.[15]
  • July 22, 2026OneSpan introduced DigipassONE, a unified platform covering authentication, transaction security, in-app protection, analytics and digital credentials.[14]
  • June 15, 2026OneSpan announced it will show its digital credentials early-access release at Identiverse 2026 in Las Vegas, June 15 to 17.[13]
G2 and Gartner Peer Insights
  • G2: listed, seen November 4, 2026[5]
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[16]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Incode sells mainly to organizations in financial services, fintech and neobanks, crypto, marketplaces, gaming and gambling, travel and mobility, telco, and the public sector. Incode names banks, telcos, and marketplaces among the organizations that verify with it. Workforce is aimed at employers that need to verify employees, contractors, and freelancers.OneSpan solutions for digital agreements and transactions are described across banking, financial services, healthcare and professional services. OneSpan Cloud Authentication is aimed at financial institutions facing the challenges of legacy systems. OneSpan Sign is offered with global data centers that support data residency requirements, private cloud and on-premises deployments. OneSpan services offerings are built on experience gained working with enterprise organizations.
Last verified
September 27, 2026October 16, 2026

Where they overlap

  • Incode and OneSpan are both filed under Identity verification.

Where they differ, field by field

  • Incode's primary category is Identity verification; OneSpan's is Passwordless authentication and authenticators.
  • Incode is also filed under Fraud prevention. OneSpan is also filed under Mobile security and Application shielding and RASP.
  • Incode lists Identity Verification, TrustGraph, Deepsight and Authentication. OneSpan lists DigipassONE, OneSpan Sign, OneSpan Application Shielding, OneSpan Cloud Authentication, Cronto and 3 more.
  • Incode is headquartered in San Francisco, United States.
  • OneSpan is a public company listed on NASDAQ as OSPN.

What it sells: Incode

What Identity Verification does[3]
The user photographs their government ID and takes a selfie. Incode says AI checks document legitimacy and detects tampering and forgery. Facial recognition cross-compares the live capture with the ID portrait.
What Deepsight does[3][7][10][12][16]
Deepsight protects organizations from deepfakes, AI-driven impersonation, synthetic documents, camera injection, and device tampering. Its device integrity layer detects tampered, emulated, or rooted devices. Its camera integrity layer blocks virtual cameras and prevents video injection with camera source validation.
What Authentication does[3]
iOS, Android, and Web SDKs cover the app and the browser, and call-center flows confirm a caller with a selfie. Deepsight screens the capture for deepfakes, video injection, and device tampering.

What it sells: OneSpan

What OneSpan Sign does[1][9][10][11][12]
OneSpan Sign manages the full agreement lifecycle from document preparation and identity assurance to electronic signatures and connected workflows. OneSpan Sign supports the file formats .doc, .pdf, .odt, .rtf and .txt. The OneSpan Sign Print Driver sends transactions directly to OneSpan Sign from any Windows-based application. OneSpan Sign is offered with global data centers that support data residency requirements, private cloud and on-premises deployments.
What OneSpan Application Shielding does[7]
OneSpan Application Shielding addresses threats such as tampering, reverse engineering, overlay attacks, code injection, code modification and data theft from the app. OneSpan Application Shielding allows the app to operate in environments such as jailbroken or rooted devices.
What OneSpan Cloud Authentication does[7]
OneSpan Cloud Authentication helps financial institutions with the challenges of legacy systems. OneSpan Cloud Authentication supports migration from legacy on-premises infrastructure to a SaaS authentication platform.
What Digipass FIDO2 security keys does[8]
Digipass FIDO2 security keys can be connected to desktop and mobile devices via USB-C. Digipass FX1 is a phishing-resistant, passwordless FIDO2 security key with a fingerprint biometric sensor. Digipass FX7 is a phishing-resistant, passwordless FIDO2 security key where users authenticate with a simple tap.

Questions about Incode and OneSpan

What do Incode and OneSpan sell?
Incode sells Identity Verification, TrustGraph, Deepsight and Authentication. OneSpan sells DigipassONE, OneSpan Sign, OneSpan Application Shielding, OneSpan Cloud Authentication, Cronto and 3 more.
Are Incode and OneSpan in the same category?
They share Identity verification. Incode's primary category is Identity verification and OneSpan's is Passwordless authentication and authenticators.
Where are Incode and OneSpan headquartered?
Incode is headquartered in San Francisco, United States.
Who owns Incode and OneSpan?
OneSpan is a public company listed on NASDAQ as OSPN.
Who are Incode and OneSpan sold to?
From its own pages, Incode sells mainly to organizations in financial services, fintech and neobanks, crypto, marketplaces, gaming and gambling, travel and mobility, telco, and the public sector. OneSpan solutions for digital agreements and transactions are described across banking, financial services, healthcare and professional services.
What have Incode and OneSpan announced recently?
October 14, 2026: Incode launched TrustGraph, a privacy-preserving trust network for detecting repeat fraud and agentic fraud across institutions. October 19, 2026: OneSpan appointed Megan Shamas as Senior Director of Product Marketing and Matthew Miller as Director of Product Management for its Cybersecurity business.

About Incode

Incode is an identity platform that verifies people, businesses and AI agents, with identity verification, deepfake detection, authentication and workforce products. Incode says its AI-driven technology is built entirely in-house. Incode says it confirms that the person behind every account, every transaction, and every AI agent is real, is who they claim to be, and can be trusted. Incode verifies people and the AI agents acting on their behalf, extending trust to every interaction.

Incode combines document, biometric, and liveness checks in a single flow. In the capture step, the user photographs their government ID and takes a selfie. Incode says AI then checks document legitimacy and detects tampering and forgery. Incode's facial recognition cross-compares the live capture with the ID portrait, while passive liveness and Deepsight confirm a real human is present. Incode combines custom-built AI models, deterministic identity checks, and direct integrations with government systems of record. Incode lets customers customize colors, fonts, and layouts from the dashboard and deliver a consistent experience across mobile, web, and embedded flows. Incode also offers a dashboard to uncover fraud trends, monitor conversion, and tune performance.[1][7][8][9]

Deepsight is Incode's proprietary deepfake and liveness detection engine. Incode describes Deepsight as protecting organizations from deepfakes, AI-driven impersonation, synthetic documents, camera injection, and device tampering. Deepsight's behavioral layer flags anomalies in device motion and user behavior that signal bots or scripted fraud. Deepsight's device integrity layer detects tampered, emulated, or rooted devices that open the door to spoofing and injection. Deepsight's camera integrity layer blocks virtual cameras and prevents video injection with camera source validation. Deepsight for Documents protects the document layer, catching forged IDs, passports, and supporting documents.[10]

GovFaceMatch matches biometrics against government systems of record. GovFaceMatch performs a face match against DMV and government records. Incode says matching runs inside the DMV’s secure environment, with no biometric data stored and no government PII shared. TrustGraph connects people, AI agents, and actions across 700+ enterprises.[11]

Incode lets returning customers sign in with a glance, matched to the identity verified at onboarding. iOS, Android, and Web SDKs cover the app and the browser, and call-center flows confirm a caller with a selfie. Incode screens each sign-in capture for deepfakes, video injection, and device tampering with Deepsight. Incode verifies identity without an ID document, using biometrics and trusted data, and checks a few fields against government, credit and telco records. Incode estimates a user's age from their face entirely on their device, without ever transmitting the image to a server. Incode says age and liveness models run entirely on the user's phone, and no biometric image or PII ever leaves it. Age checks complete, on average, in under 5 seconds. The Privacy Lens blurs or pixelates the face so it is never visible, not even on the user's own screen.[11][12][13]

Workforce covers the employee lifecycle: hiring, onboarding, MFA resets, and help desk. Employees complete one guided identity check with a government ID and a live selfie. From then on, a quick selfie confirms it is really them at every moment that matters, with no passwords, app downloads, or extra devices. Incode plugs directly into Okta, Microsoft, Ping, Workday, ServiceNow, and more. Incode defines Know Your Employee (KYE) as a risk-based approach to verifying employee identity throughout the employment lifecycle. Incode business verification (KYB) offers eight checks for US businesses, and customers choose only the checks each applicant needs, through one API. Incode accepts Google Wallet digital IDs, and users verify with a mobile driver's license or state ID in one tap, sharing only the fields the check needs.[14][15]

Incode gives every AI agent a verified identity, bound to an accountable owner, tokenized, and continuously monitored. Incode ties every AI agent's actions to a verified human principal using high-assurance identity verification and liveness detection. Agent activity is detected across human surfaces and machine-to-machine protocols, separating agents from the people they act for. Incode links every agent to a verified human through high-assurance identity checks before sensitive data is accessed or critical actions are taken. Incode monitors agent activity patterns for anomalies and deviations from expected behavior.[15]

Incode serves financial services, fintech and neobanks, crypto, marketplaces, gaming and gambling, travel and mobility, telco, and the public sector. Incode covers 190+ countries and territories and supports 4,900+ document types. Incode cites Klar in fintech, where 7M+ users are verified from an ID and a selfie. In social media, 18M+ users a year are age-verified across TikTok's appeal flow. In travel and marketplaces, Airbnb extends verified trust in 200+ countries and regions. Ricardo Amper founded Incode on June 17 in San Francisco. Incode reached a $1.25B valuation following its Series B round. Incode acquired MetaMap and AuthenticID. Incode acquired Identiq and committed $100M to privacy-preserving identity infrastructure. Incode holds SOC 2 Type II certification and iBeta PAD Level 3 certification.[1][4][10][13][14][15]

Incode on the record

Sources

Incode full record

  1. [1]incode.comIncode · incode.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]Interac chooses incode to strengthen identity verification in canadaIncode · incode.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]AI Identity Verification Software & KYC Platform | IncodeIncode · undated page, accessed October 25, 2026 · Tier A
  4. [4]Incode Launches Agentic Identity to Verify and Secure AI Agents in the Era of Autonomous ComputingBusiness Wire · published October 27, 2025 · Tier A
  5. [5]Incode Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 25, 2026 · Tier C
  6. [6]Incode: AI-Powered Identity Verification CompanyIncode · undated page, accessed November 4, 2026 · Tier A
  7. [7]Identity Verification — IncodeIncode · undated page, accessed November 4, 2026 · Tier A
  8. [8]UI customization — IncodeIncode · undated page, accessed November 4, 2026 · Tier A
  9. [9]Advanced analytics | IncodeIncode · undated page, accessed November 4, 2026 · Tier A
  10. [10]Deepsight: Deepfake Detection & Liveness AI | IncodeIncode · undated page, accessed November 4, 2026 · Tier A
  11. [11]Products | IncodeIncode · undated page, accessed November 4, 2026 · Tier A
  12. [12]Authentication: Face Login for Returning Users | IncodeIncode · undated page, accessed November 4, 2026 · Tier A
  13. [13]On device age estimationIncode · undated page, accessed November 4, 2026 · Tier A
  14. [14]Workforce: Employee Identity Verification & KYE | IncodeIncode · undated page, accessed November 4, 2026 · Tier A
  15. [15]Agentic Identity: Verified Identity for AI Agents | IncodeIncode · undated page, accessed November 4, 2026 · Tier A
  16. [16]Incode Launches Deepsight, the World’s Most Accurate Deepfake DefenseUK Tech News · published December 2, 2025 · Tier A
  17. [17]Incode reaches iBeta Level 3 with passive selfie livenessSecurityBrief US · published March 4, 2026 · Tier A
  18. [18]Incode launches TrustGraph, the First Trust Network Built for the Agentic EraWRAL · published October 14, 2026 · Tier A

OneSpan full record

  1. [1]onespan.comOneSpan · onespan.com · undated page, accessed October 16, 2026 · Tier A
  2. [2]News releasesOneSpan · onespan.com · published October 7, 2026 · Tier A
  3. [3]eSignature, Authentication, Mobile App Security | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  4. [4]About OneSpan - We protect the world from digital fraud | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  5. [5]Professional Services | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  6. [6]Authentication | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  7. [7]Customer Authentication | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  8. [8]Digipass FIDO2 security keys | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  9. [9]OneSpan Sign: eSignature platform for customer agreementsOneSpan · undated page, accessed November 10, 2026 · Tier A
  10. [10]OneSpan Sign: eSignature product features | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  11. [11]Qualified Electronic Signature | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  12. [12]OneSpan Sign FAQ | OneSpanOneSpan · undated page, accessed November 10, 2026 · Tier A
  13. [13]The Shift to Digital Credentials Accelerates: OneSpan Launches Early Access at IdentiverseOneSpan · published June 15, 2026 · Tier A
  14. [14]OneSpan Introduces DigipassONE, Bringing a Unified Platform Approach to Authentication ModernizationOneSpan · published July 22, 2026 · Tier A
  15. [15]OneSpan Advances DigipassONE to Help Organizations Put Modern Authentication into PracticeOneSpan · published October 19, 2026 · Tier A
  16. [16]OneSpan Sign Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.