01SECURITY
Your face stays on your device
Your face and fingerprint data stay on your device. BioAuth provides biometric login and MCR, proprietary account recovery without a biometric database.
- NO BIOMETRIC DATABASE
- BIOMETRICS ON-DEVICE
- MCR, proprietary account recovery
02SECURITY OUTCOMES
Private sign-in,
private recovery.
On-device biometrics, WebAuthn passkeys, sign-in that resists phishing, and MCR, proprietary account recovery.
BIOMETRICSRaw device biometric data is not sent to BioAuth in standard flows
PASSKEYSWebAuthn · bound to the real site
PRIVACYNo biometric database
RECOVERYMCR-no backdoor, phishing resistant
03Recovery
MCR, proprietary recovery
Contact support for details.
Protect the device, too
Passkeys resist phishing. But, an unlocked/compromised device can still expose sensitive data. Encourage users to remove lost devices.
04COMPLIANCE
Privacy-conscious design,
customer-specific compliance.
BioAuth provides controls intended to support privacy-conscious deployments. Compliance depends on each customer's use case, configuration, notices, consent, retention, and jurisdiction.
PRIVACYData-minimizing standard flows
CUSTOMERSControl notices, consent, and retention
BIOMETRICSProcessed on the user’s device
LEGALDeployment-specific review required
Security Questions?
Security details on request