Skip to main content

Palm data and Audit Images

VeryAI processes different kinds of palm data for different purposes. A full-resolution Palm Image, a mathematical Palm Model, and a low-resolution Audit Image are not the same thing.

Palm Image

A Palm Image is the full-resolution image captured during enrollment. VeryAI uses it to create the Palm Model. The full-resolution image is not separately retained after Palm Model generation. Ordinary verification against an existing Palm Model does not capture or store a new Palm Image.

Palm Model

A Palm Model is the encrypted mathematical representation created from the Palm Image. It contains feature vectors used to compare a later scan with the registered palm. The mathematical feature vector cannot reconstruct a full-resolution image of the palm. VeryAI stores Palm Models in an isolated, encrypted biometric environment, separate from non-biometric account data.

Audit Image

An Audit Image is a limited, low-resolution image, crop, or derived visual record of a palm capture. It may be stored separately or embedded with the Palm Model.

VeryAI uses Audit Images only for:

  • Fraud and spoof prevention

  • Liveness detection

  • Capture-quality review

  • Debugging and service reliability

  • Security investigations

  • Audit and abuse prevention

Palm Images, Palm Models, and Audit Images are not shared with partner platforms unless you expressly authorize the sharing or disclosure is required by applicable law. Service providers acting for VeryAI may process them under contractual security and confidentiality requirements.

How long are Audit Images kept?

  • A low-resolution image derived from an enrollment capture may be kept for up to 90 days for automated fraud, liveness, and quality review.

  • A valid or authentic Audit Image is retained for no longer than 90 days from capture, then permanently destroyed or anonymized.

  • An Audit Image connected to a fraudulent, invalid, rejected, or security-flagged capture may be kept for no longer than 12 months from flagging, unless law or legal process requires longer retention.

What partners receive

Partners receive a pseudonymous identifier, the verification result, a timestamp, and limited authorized metadata. Palm Images, Palm Models, and Audit Images are not shared with partners unless you expressly authorize the sharing or disclosure is required by applicable law.

Encryption

VeryAI protects sensitive data in transit with TLS 1.2 or later and encrypts sensitive production data at rest using AES-256 or equivalent controls.

Deletion

You can schedule deletion of your Palm Model through the app. A grace period of up to 90 days allows reactivation before permanent deletion. Audit Images and security records may follow separate retention periods.

Questions or privacy requests


Did this answer your question?