Consent-based enrollmentEnroll only people the customer is authorized to enroll, with clear retention and removal controls.
Encrypted templatesPrefer encrypted face embeddings/templates over using raw face photos as the normal matching record.
Liveness / anti-spoofing (coming soon)Anti-spoofing checks before automatic access are coming soon.
Confidence thresholdA weak or ambiguous match must not unlock the door. It should remain locked and optionally request another verification method.
Fail-secure behaviorIf recognition, policy evaluation, network connectivity or the provider API fails, the access request fails closed rather than assuming access is allowed.
Least-privilege API credentialsUse a provider credential restricted to only the doors/actions required for the site, with rotation and revocation support.