Encrypted at rest
Face templates and photos are encrypted before they are stored. Passwords are hashed, and sign-in tokens are kept only as hashes.
Security & privacy
Built around the sensitivity of faces
Biometric data deserves more care than ordinary data. These are the protections built into FacePass and FaceConnect today.
Isolated per business
Every business has its own Tenant ID. Queries are always limited to your business, and the FacePass team sees counts and status for support - never employee names, photos or attendance.
Locked-down terminals
Release builds refuse to run on rooted devices or with debugging switched on, block screenshots and screen recording, and protect settings with an administrator PIN.
Spoof-aware recognition
An anti-spoof model and a blink check run before a face is accepted. No face system is spoof-proof, so we advise a supervised gate and testing on your own hardware.
Sessions that end
Panel sessions end after a short idle time and after a maximum duration. Sign-in is rate limited, and accounts lock after repeated failures.
An audit trail
Corrections, settings changes, exports and sign-ins are written to an audit log with who, what and when.
Your data, your choice
Export your data whenever you like. A deletion request has a 72-hour grace period and a downloadable archive; after that the data is removed for good.
A safe employee app
FaceConnect keeps its sign-in tokens encrypted with the Android Keystore and signs the employee in with a PIN. It only reports the face check and the location; the server decides, and a fake-location app is detected and refused.
Controlled sign-in on terminals
Each guard is signed in on one terminal at a time, picks the gate at sign-in, and the terminal can allow sign-in only from the IP addresses, ranges, Wi-Fi names or internet providers you set.
Visitor data under your control
Visitor details and photos belong to your business. A visitor can ask for the saved face to be removed, and your administrator decides. Photos kept with scans are deleted after a set time.
A switch for emergencies
Maintenance mode pauses the terminals and every employee's FaceConnect at once, with a message, while nothing already recorded is lost.
Safe when offline
Records are saved on the device before upload and are never counted twice, so a lost connection cannot lose or duplicate attendance.
Your responsibilities. As the business using FacePass you decide who is enrolled, you should tell your employees what is collected and why, and you should follow the laws that apply to biometric data where you operate. Read our privacy policy and terms for the details, or contact us with security questions.
Ready to retire the register and the punch card?
Try FacePass at your own gate. We will help you set up the first branch and terminal.