Idemia is a French biometrics company, headquartered at Courbevoie, whose public security division supplies fingerprint and facial recognition systems to police forces, national agencies and Interpol. It is less visible in public debate than Clearview AI or NEC, but is arguably more deeply embedded: its systems sit inside national identification infrastructure in several countries rather than being deployed as visible cameras on streets.

Its policing footprint includes Interpol's Multibiometric Identification System, the Kansas Bureau of Investigation's automated biometric identification system, work with France's Gendarmerie Nationale, and Australia's NAFIS NextGen biometric identification system delivered with the Australian Criminal Intelligence Commission. In Canada it supplies the shared facial recognition network used by police across Southern Ontario.

HOW THE COMPANY DESCRIBES IT

Idemia's public positioning is notably more measured than most vendors in this catalogue, and that is worth recording accurately rather than dismissing.

Its central accuracy claim is anchored in independent benchmarking: the company states that fairness is provided by design in its identification algorithms, as demonstrated by independent public evaluation of their performance by NIST. It publicises top rankings across NIST fingerprint and face benchmarks and a top position in the US Department of Homeland Security's RIVTD evaluation for biometric accuracy and fairness.

More unusually, the company publicly concedes limits. Its own material states that it would be irresponsible to ignore facial recognition criticisms and claim the technology is flawless, that it is not flawless, and that it should not be the sole means of identifying individuals without review by a properly trained examiner. It also makes a candid technical point about a constraint on the whole field: the US Privacy Act of 1974 prevents federal agencies sharing even anonymised extracts from operational systems, which limits the data available for training and testing algorithms.

Idemia frames responsible deployment through the Biometrics Institute's Three Laws of Biometrics — policy first, process follows policy, technology guided by both — and states that concerns about bias and misidentification arise when systems are deployed without appropriate governance, testing and safeguards. That is a claim about deployment conditions rather than about the technology, and it puts the responsibility on the purchasing agency.

THE INDEPENDENT ACCURACY RECORD

Idemia's NIST results are genuinely strong. In NIST's Face Recognition Technology Evaluation 1:N ranking published 8 November 2024, covering more than 150 algorithms, Idemia placed second in the mugshot category at a gallery size of 12 million. A later submission recorded the fourth-lowest false negative identification rate at a false positive identification rate of 0.003.

For a police force conducting one-to-many searches against a custody image database, those are the directly relevant measures, and they are produced by an independent US government body rather than the vendor.

HOW POLICE USE IT

The Canadian deployments are the most transparently documented and illustrate the operating model. Halton Regional Police adopted Idemia's system alongside neighbouring Peel and York, and Ottawa Police Service Board approved onboarding to the same shared network in June 2026.

Halton's Deputy Chief Jeff Hill described the intended discipline clearly: only legally obtained images are compared against mugshots held in the force's system, and any match is treated as an investigative lead rather than an identification. In his words, identifying someone does not mean they are automatically guilty, and a full background investigation must corroborate the result.

Costs are unusually well documented for Ottawa: a CA$150,000 deposit in the first year against a one-time implementation cost of CA$472,631, then CA$155,000 in annual maintenance from 2027 rising to CA$161,477 by 2031, for a total of roughly CA$1.26 million.

Interpol's use gives a sense of scale at the other end: having added Idemia facial recognition capability in 2016, the organisation reported matching and identifying more than 300 suspects in 2019 across its member countries.

THE CASE FOR IT

The accuracy evidence is independent, current and specific to the task police actually perform. That distinguishes it from vendors whose figures come from their own testing.

The stated operating discipline is the right one. Treating a match as an investigative lead requiring corroboration, rather than as an identification, is precisely the control that prevents the wrongful-arrest cases documented elsewhere in this catalogue. Where forces genuinely apply it, the risk profile is materially different from systems used as a basis for arrest.

The company's willingness to state publicly that its technology is not flawless and should not be used as a sole identifier is, on the evidence reviewed, unusual among biometric vendors and worth noting.

THE CASE AGAINST

The most significant issue is not accuracy but aggregation, and it is visible in the Canadian model. Because Halton, Peel, York and now Ottawa share one network, each force joining expands the pool of photographs every other force can search. Halton's own reporting noted this explicitly as a benefit. The consequence is that the searchable database grows through a series of separate local procurement decisions, with no single point at which anyone decides how large it should become. Halton's chief has said openly that a national database would be preferable.

That is a governance structure in which scope creep is the default rather than the exception, and it happens without the public debate a national biometric database would attract if proposed directly.

The lead-not-identification discipline also depends entirely on being followed. It is a policy commitment described by senior officers, not a technical constraint on the system, and no published audit was found testing whether corroboration actually occurs before action is taken.

Idemia's framing that problems arise from deployment rather than technology is defensible, but it also transfers responsibility to purchasers who, as the UK Biometrics Commissioner has observed of forces generally, frequently acquire such systems without fully understanding their capabilities or implications.

Finally, the training-data constraint the company itself identifies cuts both ways. If legal restrictions genuinely limit the data available to test algorithms against operational populations, then NIST benchmark performance may not transfer cleanly to the specific demographic mix of any given jurisdiction.

WHAT IS NOT ESTABLISHED

The total size of the shared Southern Ontario photo pool, and how it grows as forces join, has not been published.

No independent audit was found testing whether the investigative-lead discipline is applied in practice in any Idemia deployment.

Which specific Idemia algorithm version each police customer runs is generally not disclosed, so the NIST rankings cannot be reliably mapped onto a given deployment.

The full extent of Idemia's police customer base is unclear. The examples above are those the company or its customers have publicised; no comprehensive list exists.