IdenTrust, Inc. Due Diligence
Run due diligence on IdenTrust, Inc.: check compliance and get alerts when suppliers change.
United States · www.identrust.com · 25 vendors
IdenTrust, Inc. is a leading provider of digital certificates and Public Key Infrastructure (PKI) solutions. It offers identity-based security services for user authentication, data encryption, and digital signing across various sectors. The company's solutions help protect data, authenticate users, and enable secure online transactions for financial institutions, government agencies, healthcare providers, and enterprises.
Resilience scores
- Digital Sovereignty: 76
- Digital Resilience: 7
- Financial Resilience: 7
Technology vendors
- Interactive Calculator — Technology — United States
- OneTrust — Technology — United States
- Outgrow — United States
- and 22 more
Services catalogue
3 services in catalogue across 2 categories; runs on 25 sub-vendors.
- Certificate Authority
- IdenTrust Certificates
- SSL/TLS Certificate Validation
Insights
Last updated 2026-08-11 · revision 17
25 direct vendors, 281 subvendors
Direct vendors by controlling owner country (sample)
- Canada: 1
- United States: 19
- Belgium: 1
Subvendors by controlling owner country (sample)
- Brazil: 1
- Lithuania: 1
- Sweden: 11
Compliance
12 in-scope frameworks identified; showing 3.
DoD ECA — Evidence found
Evidence: https://www.identrust.com/identrust-accreditations, https://www.identrust.com/digital-certificates/dod-eca-programs, https://www.identrust.com/certificates-portfolio/eca
SOC 2 (source) — Evidence found
Evidence: https://www.identrust.com/identrust-accreditations, https://www.identrust.com/about-identrust
DEA EPCS — Evidence found
Evidence: https://www.identrust.com/digital-certificates/epcs-prescribing, https://www.identrust.com/my-buying-community/healthcare, https://www.identrust.com/certificates-portfolio/igc-epcs, https://www.identrust.com/partners/epcs
Financials
Three-year financials
- 2024:
- 2023:
- 2022:
Financial Resilience Score: 7/10
IdenTrust's financial resilience is primarily derived from its parent company structure rather than standalone financial metrics. As a wholly-owned subsidiary of HID Global, which is itself owned by ASSA ABLOY AB (a Swedish publicly listed company with market cap generally exceeding SEK 300 billion), IdenTrust benefits from significant balance-sheet strength, R&D funding, and access to capital that would be unavailable to a standalone certificate authority. The parent group generated approximately SEK 150,981 million in net sales in FY2024 with operating income of ~SEK 24,013 million. IdenTrust itself has a durable business model with recurring subscription-like revenue from digital certificates (1-3 year validity with renewals), producing predictable cash flow. The company holds deep regulatory accreditations including WebTrust, CAB Forum Baseline, U.S. Federal Bridge cross-certification, DoD ECA authorization, DEA EPCS authorization, and AICPA SOC certifications, which create high barriers to entry and long-term customer relationships. Its 25+ year operating history as a PKI pioneer and diversified customer base across government, healthcare, financial services, and enterprise segments further supports resilience. However, resilience is tempered by industry-specific risks: the public-trust TLS/SSL market is increasingly commoditized with pressure from competitors like DigiCert, Sectigo, GlobalSign, and free CAs like Let's Encrypt. The CA industry also faces existential regulatory risk—any mis-issuance or security breach can trigger distrust by browser root programs. Concentration in U.S. government business exposes IdenTrust to federal budget cycles.
Key strengths: Backed by financially strong publicly-listed parent ASSA ABLOY (market cap >SEK 300B), Over 25 years of operating history as a PKI pioneer, Deep regulatory accreditations (WebTrust, DoD ECA, DEA EPCS, Federal Bridge) create high barriers to entry, Recurring subscription-like revenue model from certificate renewals, Diversified customer base across government, healthcare, financial services, and enterprise
Risk factors: Commoditization pressure in TLS/SSL market from competitors including free CAs like Let's Encrypt, Regulatory/compliance risk—any mis-issuance or security breach can lead to browser root program distrust, Shortening certificate lifetimes (moving to 90-day certificates) forcing infrastructure changes, Concentration in U.S. government business exposes to federal budget cycles, Limited financial transparency for third parties as no standalone accounts are published
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.