← Back to database

Predaxia Research

Idemia

Idemia · France

ActiveSafran / Oberthur merger 2017
3

Confidence 3/5

VendorIdemia (formerly OT-Morpho)
Country of originFrance (Courbevoie, headquartered)
Founded2017 (merger of Safran Identity and Security with Oberthur Technologies)
Predecessor lineageMorpho (Safran subsidiary, biometric algorithms)
Majority ownershipAdvent International with Bpifrance minority
Current statusActive. Major government identity-issuance vendor
US Entity ListNo
Notable customersUS TSA, US DHS, most EU governments, ICAO passport ecosystem
Predaxia GlossaryWhat it means in practicePlain-English explainer · Threat model · Action steps

Technical capabilities

Idemia is one of the largest commercial biometrics vendors. Its product portfolio covers fingerprint matching (AFIS-class systems for forensic and civil identification), face recognition (MorphoFace, MFace family), iris recognition, passport and national-identity-document issuance, e-Gates for border control, transit fare-collection biometrics, and identity verification for financial institutions.

Idemia algorithms have consistently performed in the top tier of NIST FRVT face-recognition rankings, comparable to NEC NeoFace. The commercial positioning is heavier on government-identity issuance and civil identification than on Live Facial Recognition deployment in public spaces.

Documented use

  • United States: Idemia is a long-standing TSA PreCheck enrollment partner, with biometric ID-document issuance for many US states (driver licenses, state IDs, fingerprint-based background checks).
  • European Union: passport personalization and biometric chip provisioning under ICAO standards for multiple member states.
  • India: contracts under the Aadhaar national-identification system in earlier deployment phases.
  • France: integrated identity card production, gendarmerie and Police nationale forensic AFIS, RATP and SNCF transit biometric pilots.
  • Mauritius and several African states: national-identity systems.

Idemia’s public profile is less marked by misuse controversies than Clearview, Hikvision or Dahua. The commercial footprint is concentrated in lawful identity-issuance, although civil-liberties concerns are raised regarding the scale and integration of state biometric databases.

Customer states

Idemia serves the majority of OECD governments for identity-document issuance and border-control biometrics. The vendor states compliance with European General Data Protection Regulation (GDPR), French data-protection law, and equivalent regimes in customer states.

Legal and sanctions status

  • Not on the US Department of Commerce Entity List.
  • Not designated by US OFAC.
  • Subject to French Commission nationale de l’informatique et des libertés (CNIL) oversight for French deployments.
  • Subject to EU GDPR for processing of EU resident biometric data.
  • Subject to French export-control review under EU Regulation 2021/821 for dual-use exports.

Technical countermeasures

  • GDPR subject-access requests: EU residents can request access, rectification, and erasure of biometric data held by Idemia and its government customers under Article 15 to 17 GDPR.
  • Selective enrollment: where biometric enrollment is voluntary (transit, frequent-flyer biometric gates), consider whether the convenience benefit justifies enrollment.
  • Identity-document handling: protect biometric chips in passports and ID cards from skimming with RFID-shielding sleeves where threat modeling justifies it.
  • Border-gate handling: in jurisdictions where eGate use is optional, manual immigration channels avoid biometric capture against state-held templates.
  • Policy advocacy: support meaningful limits on use of state biometric databases for unrelated law-enforcement purposes.
For at-risk individuals. Most encounters with Idemia technology are mediated by your government, not directly by Idemia. GDPR rights and equivalent civil-data-protection regimes are the primary practical lever for individuals.

Sources

  1. Idemia, Corporate profile and product documentation
  2. NIST FRVT, Ongoing benchmark including Idemia submissions
  3. CNIL, Dossiers on biometric identity systems
  4. Privacy International, Surveillance Industry Index profile
  5. Mediapart, Investigations into French biometric identity policy
  6. Bpifrance, Idemia public-investment communications

Update log

May 4, 2026: First publication. Sourced from Idemia corporate documentation, NIST FRVT benchmark results, French CNIL dossiers, Privacy International Surveillance Industry Index, and Mediapart investigative coverage of French biometric identity policy.

There’s no perfect setup. Anyone selling you perfect is selling fear. The goal is simple: make yourself a harder target than the person next to you.