Our Take
Identity verification in healthcare is table-stakes compliance, not competitive advantage — but the vendors treating it as a platform play may force consolidation.
Why it matters
Health systems face dual pressure: NIST IAL2 compliance requirements for patient portal access and rising fraud losses (projected to hit $40 billion by 2027, per Zoom's statement). Bundling identity verification into existing EHRs and video platforms reduces deployment friction, but fragmentation across vendors leaves systems managing multiple identity graphs.
Do this week
Healthcare IT leaders: audit which identity verification vendor integrates natively with your EHR and video conferencing stack before Q3 budget locks, so you avoid bolt-on costs and duplicate compliance work.
Five vendors shipped identity verification tools in one quarter
Verato announced its Identity Network (VIN) in March, a shared identity infrastructure designed to centralize patient identity matching across providers and payers instead of requiring each organization to maintain separate data bridges. Traditionally, identity matching requires every hospital or insurance company to clean its own database; Verato's model creates a neutral hub that grows more accurate as participants join.
1Kosmos and Voucher both integrated identity verification into Epic's MyChart portal. 1Kosmos launched verification at portal access and enrollment using government-issued document authentication, biometric matching, and liveness detection, meeting NIST Identity Assurance Level 2 (IAL2) requirements. Voucher's IAL2-compliant tool arrived in March and enables identity recovery and ongoing access verification through government ID and selfie matching.
Zoom integrated Tools for Humanity's World ID Deep Face verification into Zoom Meetings in April, allowing users to create a World ID via advanced camera scan and then verify their identity with a selfie before joining a meeting. A "Verified Human" badge then appears on their video tile.
Lexis Nexis launched an AI-driven identity management platform in March using proprietary AI models and deep neural networks for document authentication. The platform automates identity verification, resolves duplicate identities across care settings, and expedites registration and claims processing workflows.
Consolidation risk and vendor lock-in are the real story
All five announcements cite the same compliance driver: NIST IAL2 requirements for patient portal access and the need to reduce fraud. The fraud argument carries more weight. Zoom's public claim that fraud losses will grow from $12 billion in 2023 to $40 billion by 2027 (company-stated projection) gives health systems a concrete reason to act now rather than defer.
But the clustering of announcements reveals a structural problem. Verato's pitch is network effects through consolidation: organizations that embed identity early "will set the standard" and gain defensible positions. This assumes adoption of a single shared layer. Epic's native integrations with 1Kosmos and Voucher push the opposite direction: identity verification buried inside existing EHR workflows reduces switching cost for customers already committed to Epic, but multiplies the compliance burden for systems that rely on multiple vendors.
Zoom's integration signals the real risk. Adding identity verification to videoconferencing for healthcare means patient-facing identity workflows now depend on Zoom uptime and API stability. Systems that already rely on Zoom have fewer exit options.
Ask your vendor: single hub or native bundle?
Before evaluating any of these solutions, health IT leaders should clarify whether they want a centralized identity network (Verato's model) or native integrations inside their existing tools (Epic, Zoom). Verato's approach reduces per-organization data cleanup but requires all participants to trust a third party. Native integrations minimize architectural dependencies but create vendor lock-in and force separate compliance work if you use multiple vendors.
Audit which identity verification vendor integrates natively with your EHR and video conferencing stack. Check whether they meet IAL2 requirements in writing and whether their uptime SLA covers your peak patient access hours. Do not assume Epic's integrations are sufficient; the company rolled out support for two vendors, not exclusivity, so you will still need to choose.