How does the Age Check Certification Scheme help businesses assess age estimation solutions?
The Age Check Certification Scheme (ACCS) provides businesses with a standardized framework and independent assessment to audit the accuracy and reliability of age estimation solutions (and other related technologies) for regulatory compliance. By offering impartial, standardized testing, ACCS helps businesses cut through vendor claims and confidently adopt age estimation technologies that meet compliance standards and protect minors.
As global regulations tighten and public scrutiny around online safety grows, age assurance is a strategic priority. But not all age estimation solutions are created equal, and without independent benchmarks, it’s nearly impossible to assess accuracy, fairness, and effectiveness at scale. That’s where the ACCS tests come in: they bring transparency and accountability to a rapidly evolving space, helping organizations align with standards, avoid regulatory pitfalls, and make smarter technology investments.
In this post, we’ll unpack what ACCS tests evaluate, why they matter to your business, and how certifications like these can shape the future of responsible, user-centric age assurance.
Age estimation: understanding the regulatory context behind the ACCS certification
In recent years, we’ve seen a significant shift in how governments approach online safety. This has led to regulations requiring:
Global age verification laws in countries around the world
The UK's Online Safety Act, the EU's Digital Services Act, Australia’s social media ban, and a number of state-specific laws (and proposals) in the United States all emphasize the obligation of digital service providers to implement age assurance measures that are proportionate to the risk of harming minors.
These age estimation or verification regulations share a common goal: foster age-appropriate digital experiences while protecting younger users from potentially harmful content.
What makes these regulations particularly noteworthy is their emphasis not just on having age assurance in place, but also ensuring these systems are demonstrably reliable and trustworthy. This is where the ACCS certification becomes indispensable.
Read the 2025 regulation guide for online platforms and marketplaces.
The challenge of evaluating age checking software
When evaluating age verification services, it’s natural to think that it begins and ends by considering how accurate each solution is. But while age estimation accuracy is an important metric to consider, it isn’t the only one that matters.
For example, the ability to easily configure the solution to suit per-region requirements is also key, since age thresholds, allowed assurance methods, and data safeguards (e.g. managing consent and minimizing collection of unnecessary data and redacting collected data that doesn’t need to be kept) differ from one region to another. The ethical provenance of training data and a smooth end-user experience are also important factors to consider.
That said, accuracy is still an important factor to take into consideration. However, accuracy claims are difficult to interpret — and can even be misleading — without context around how they were attained. A solution might, for example, claim high accuracy based on limited testing with an unrepresentative sample or different (i.e., more lax) evaluation criteria than other solutions.
Key challenges of age verification services that ACCS tests help solve |
|---|
Accuracy |
Demographic variability |
Adverse scenarios |
Risk profiles |
Key challenges in evaluating age checking software include:
Demographic variability: Solutions may perform differently across various demographic groups due to inherent biases in training data
Adverse scenarios: Performance can significantly deteriorate in the face of challenging conditions like poor lighting or complex fraud attempts
Risk profiles: Different user segments may require different levels of verification stringency
Before certifications like those offered by the ACCS, any age estimation vendor could claim that their estimation product was the most accurate on the market, and their test results might have supported that claim. However, no vendor was using the exact same testing sample and procedures, making it difficult to perform apples-to-apples comparisons.
What is the Age Check Certification Scheme (ACCS)?
The Age Check Certification Scheme (ACCS or sometimes ACC-Scheme) is an independent assessment body that tests and certifies age and identity verification systems. In addition to age verification software — the focus of this article — the ACCS also tests passport scanners, biometric technologies, and other solutions.
The ACCS is accredited with the United Kingdom Accreditation Service (UKAS) and consists of data protection experts, certification specialists, and auditors. Because the ACCS has been approved by the UK government as a certification body, businesses looking for compliant solutions can feel confident in their choice when selecting an ACCS-certified solution.
The role of independent certification like the ACC-Scheme
Independent certification by third-party organizations like the Age Check Certification Scheme (ACCS) is essential for businesses evaluating age verification and estimation technologies. The ACCS test provides standardized processes that allow for fair, apples-to-apples comparisons of different solutions.
This approach mirrors how the Environmental Protection Agency (EPA) in the US enables consumers to compare vehicle fuel efficiency. By using consistent testing methods, the EPA makes it possible to assess fuel economy across manufacturers and models, whether gas-powered or electric. Without such standards, each manufacturer could report efficiency differently, leaving consumers with little ability to compare vehicles accurately.
In a world without the EPA's guidelines, buyers would be left to trust manufacturers’ claims or attempt their own costly and time-consuming tests. While some might go to such lengths, most would either accept the numbers at face value or lack the means to validate them.
These same dynamics exist in age estimation technology. Without a common benchmark like the ACCS test, it’s difficult to assess the reliability and accuracy of competing solutions. The ACCS ensures that age estimation and verification systems adhere to recognized standards for accuracy, security, and privacy, giving businesses the confidence to make informed decisions.
In an era where regulators, like those behind the UK Online Safety Act, demand greater online protections and higher accountability, this certification serves as an independent validation of a vendor’s technical capability and commitment to compliance.
The top benefits of the ACCS test
The scheme evaluates the full life cycle of age verification solutions — from the underlying algorithms that power the solution to its data handling and privacy safeguards. This certification is a valuable indicator that a vendor has both the technical depth and operational maturity necessary for high-stakes deployments.
The ACCS test provides these benefits:
1. Standardized evaluation
One of the primary benefits offered by independent certification bodies like the ACCS is the fact that they evaluate all solution providers against consistent datasets that:
Represent diverse demographics and use cases
Include sufficient sample sizes for statistical significance
Test performance under various real-world conditions
This consistency makes it possible to directly compare multiple age estimation solutions by their accuracy metrics, including Mean Absolute Error, false negative rates, false positive rates, and more.
2. Comprehensive assessment
Because accuracy isn’t the only metric that matters, most independent certification programs also evaluate other crucial factors that are likely to be important to businesses, including:
Data privacy and security practices
Data minimization processes to minimize risk
Bias detection and mitigation in the software
Fraud prevention capabilities
Accessibility and user experience
In the same way, a standardized evaluation of accuracy allows businesses to make more direct comparisons between solutions, so too does the standardization of these additional factors — which can be just as important to your goals as accuracy metrics.
3. Regular re-evaluation
The age assurance landscape is constantly evolving. As new technologies (such as the emergence of AI-generated selfies and images) become available, fraudsters increasingly incorporate them into their toolkits — forcing solution providers to adapt.
With this in mind, many certification programs, like the ACCS test, require a periodic re-evaluation of solutions to ensure they have maintained their effectiveness despite changing fraud trends and techniques. This makes it easier for businesses to decide whether they need to change providers once they already have one in place. It also gives businesses insight into the long-term trajectory and quality of a solution, which may be an important consideration.
What to consider before implementing ACCS-certified technology
As you build your age assurance and verification program, third-party certifications like the one offered by the ACCS are an important consideration. But it’s important to recognize that it’s just one part of broader, effective age verification strategies. Other factors you should consider include:
Multiple verification methods
No single verification method is perfect for all organizations in all scenarios. Which methods you deploy should be informed by the regulations you are subject to, the jurisdictions you operate in, the expectations of your customers or users, and your organization’s unique risk tolerance.
Ultimately, in most circumstances, businesses should consider implementing multiple age assurance methods and applying them with dynamic flows depending on the risk level and context of each user interaction. Contextual factors include:
The geographic region a user is in — and the allowed methods for that region
The type of content or service in question
The target age group of the user and the likelihood that children may access the content or service
Your risk tolerance and business objectives
Privacy by design
Depending on the types of age assurance technology you use, you may be collecting (or at least processing) a significant amount of sensitive information from your users. This may include names and dates of birth, government-issued IDs (like driver’s licenses and passports), selfies, and more.
With this in mind, whatever age assurance solution you ultimately deploy should be built upon robust privacy principles. This may include:
Data minimization, so you’re only collecting the minimum amount of data necessary to achieve the assurance level you need
Purpose limitation, so you’re only using the data you collect for a specific and lawful purpose
User consent management, so you’re able to collect and update user consent for the collection and use of their data, as required by many consumer privacy laws, including the GDPR in Europe
Automatic PII redaction, to ensure sensitive information isn’t inappropriately accessed by others in your organization with no need to access it
Fraud prevention
Just as is the case with identity verification, as age assurance becomes more common, so too will attempts to skirt it. Any solution you are considering should have robust fraud prevention measures, including:
Liveness detection and spoof detection, to ensure you’re dealing with a real person or ID — not AI-generated assets
Behavioral analysis, including hesitation detection and other features that can help you gauge the risk associated with each individual session
Link analysis, which can help you understand how accounts on your platform are linked to one another — including whether or not suspicious links exist, which might point to coordination (such as a single fraudster opening multiple accounts for fraudulent purposes)
Adaptability
Your age assurance program shouldn’t be a set-it-and-forget-it strategy. As the industry and technology continues to rapidly shift, you should be looking for a solution that:
Maintains certifications according to the latest standards
Adapts to new and evolving global regulatory requirements
Provides flexible configuration options that give you the freedom to adapt age assurance as necessary for your business
Offers robust privacy controls and fraud prevention capabilities
Leverage technology with ACCS certification
The Age Check Certification Scheme provides a valuable framework for organizations to evaluate age assurance solutions. That said, certification alone isn't sufficient for an effective age assurance approach.
To build effective age assurance programs that protect minors, maintain user privacy, and meet regulatory requirements, organizations should look for age verification software that also offers comprehensive capabilities beyond establishing someone’s age, including privacy controls, fraud prevention, and the flexibility to adapt to changing requirements.
At Persona, we’ve built a flexible age assurance solution that balances compliance, conversion, and privacy. From government ID and database verification to Selfie Age Estimation and Reusable Personas, you can tailor methods to user context while automating consent, data collection, and retention.
Our Selfie Age Estimation is now certified by the Age Check Certification Scheme (ACCS), which accurately estimated 98% of 18-year-olds as under 25. This independent validation reinforces our ability to help businesses meet stringent age assurance regulations like the UK’s Online Safety Act.
To stay ahead in a shifting regulatory landscape, our teams:
Track evolving standards (Ofcom, ISO/IEC DIS 27566-1, etc.)
Participate in trials like Australia’s Age Assurance Technology evaluation
Undergo independent testing with ACCS, KJM, iBeta, NIST, and more
Want to get age assurance right? Contact a Persona expert today.