Skip to content
ArcIDby ZSA Solutions

Security & privacy

Your users' biometrics stay on their phone, unless you choose otherwise.

With standard packages, capture, liveness and template extraction happen on the device and the SDK transmits no biometric data. Optional session-evidence packages add server-side records when you need them.
A glowing shield with a keyhole made of binary code above a ring of circuit lines, illustrating data protection.

Data flow

What stays local, what doesn't

Standard packages: stays on the device

  • Camera frames and captured images
  • Biometric templates
  • Liveness results

Matching is performed by your app, locally or against your own API. The SDK itself does not transmit templates.

Standard packages: license verification only

The SDK contacts our license server to validate your license. The request contains:

  • Your license key
  • The app ID / bundle ID of the host app
  • SDK version and platform

No biometric data is included.

Optional session-evidence packages

For audit trails and disputes, these packages can send per-session statistics, frames, proofs and records to a server/backend.

They are opt-in per app. Ask us for the data-flow details before enabling them.

Privacy by architecture

Sensitive data stays where it starts: on the device.

Standard packages process biometrics locally and send nothing off the device except a license check. Optional packages add server-side session evidence when you need an audit trail.

What it means for you

Your compliance footprint depends on the package

Standard packages

The SDK does not send biometric data to us, so you don't need a biometric data-processing agreement with us for it. Data does not cross borders through our SDK.

Your storage and matching decisions

Where templates are stored and where they are matched, locally or against your own API, is controlled by your app and your infrastructure.

Session-evidence packages

If you enable session evidence, the recorded data goes to a backend, so your privacy notice, retention and data-residency rules need to cover it.

Regulations on biometric data vary by region and use case. Your own legal counsel should confirm your obligations as the app operator.

Test it in your own app, free for 14 days

Create an account, register your app and get a trial license key in minutes. No credit card and no sales call.