Retention & Deletion · Company commitment
Extracted face scans are not kept after a check, except for fraud checks
Except as described under 'Fraud checks, including device integrity and fraud signals', Entrust does not store the extracted face scans once a biometric check is complete. Where a Customer asks Entrust to provide an authentication service, the Customer may ask Entrust to store a reference image chosen by the Customer for each relevant User; that image is retained under Customer-set retention periods, subject to minimum or maximum periods specified by Entrust or applicable law. Authentication generates two face scans, one from a new image/video and one from the stored reference, and a match confirms authentication. For Known Faces, Document Known Faces, Authentication: Motion, Face Authentication, Biometric Passkey and Liveness Verification, the maximum period a Customer may instruct Entrust to store and use face scans is 365 days after the Company or User submitted the image/video used to generate the scan.
Details
- Who
- Entrust and the Customer
- What it does
- does not store extracted face scans after the check; stores a Customer-chosen reference image for authentication when asked
- What it covers
- extracted face scans and authentication reference images
- Condition
- except as described under Fraud checks
- When
- maximum 365 days for the listed services
Supporting quotations
Except as described under the section below headed “Fraud checks, including device integrity and fraud signals”, when performing biometric checks, we do not store the extracted face scans once the check is complete.
Where a Customer has asked us to provide an authentication service, the Customer may ask Entrust to store a reference image chosen by the Customer for each relevant User. (This image is retained in accordance with retention periods set by the Customer subject to any minimum / maximum retention periods specified by Entrust or in applicable laws.)
When Entrust is asked to authenticate a User, we will generate two face scans - one using a new image or video of the User, and one using the reference image we have stored. If the two face scans match, the authentication is confirmed.
The maximum period of time for which a Customer may instruct Entrust to store and use face scans for the purpose of these services is three-hundred and sixty-five (365) days after the Company or the User submitted to Entrust the image / video used to generate the face scan.
Qualifications & exceptions
- The no-storage commitment is expressly subject to the fraud-checks section.
- Stored authentication reference images follow Customer-set retention periods, subject to Entrust or legal minimums and maximums.
- The 365-day maximum applies to the listed services (Known Faces, Document Known Faces, Authentication: Motion, Face Authentication, Biometric Passkey, Liveness Verification).
Not stated here
- The linked Facial Scan and Audio Recording Policy is not part of the saved source.
- The fraud-checks section's storage rules are analyzed separately and are not restated here.
Cross-references
- qualified by (model-proposed): Biometric checks compare face-geometry scans from a Selfie and a reference image — The comparison generates face-geometry scans, while the retention rule limits their storage after the check, except for the fraud-check services.
- has exception (model-proposed): Known Faces compares a new biometric check with prior checks and adds the new face scan to the database — Known Faces is one of the fraud-check services that operates as an exception to the general no-storage rule for extracted face scans: it adds the new scan to a comparison database and can retain it up to the stated maximum.
Also annotated in the same passage (4)
- Face scan data may be a protected biometric identifier; US policy reference
- Repeat Attempts and Known Faces compare new checks with information previously verified for the same Customer
- Authentication services store a face scan in an Encrypted Biometric Token held by Entrust and the Customer
- Liveness Verification confirms physical presence through a passive facial capture without identity matching