Biometric Enrollment Consent

Provided by Applied Recognition Corp.

Enrollment inactivity period: the period established by your company administrators
Email attestation period: the period established by your company administrators

Human Confirmed uses facial verification to confirm that you are the enrolled mailbox holder and that you personally approved an email before it was sent. Facial images and mathematical face templates are sensitive biometric information. Please review the information below before deciding whether to enroll.

1. What I am consenting to

By giving my consent, I authorize Human Confirmed and my organization to collect, create, store, use, and process the facial information described below for the specific purpose of verifying my identity when I use Human Confirmed to approve an email.

Human Confirmed will not use my biometric information for advertising, marketing, employee monitoring, or unrelated identification purposes; sell, lease, trade, or otherwise profit from my biometric information; use my facial images or face templates to train general-purpose facial-recognition or artificial-intelligence models; or use my biometric information to infer unrelated characteristics such as health, ethnicity, emotions, or other personal traits.

2. Information collected when I enroll

When I enroll, Human Confirmed asks me to capture two selfie JPEG images using the camera in my phone’s web browser. These images are securely sent to Human Confirmed’s service.

Human Confirmed creates a mathematical face template from each image. These templates are used as the reference for future facial verification.

After successful enrollment, both enrollment JPEGs are permanently discarded. Human Confirmed does not retain an enrollment photograph.

Human Confirmed retains two encrypted face templates; enrollment liveness and spoof-detection scores; my business email address; the identity associated with my Microsoft Entra ID or Google Workspace account; my organization or tenant identifier; and a record of this consent, including its version and the date and time I provided it.

Human Confirmed does not search for my face in public photographs, social networks, government databases, or biometric databases belonging to other Human Confirmed customers.

3. How my face is checked when I approve an email

When I later use Human Confirmed to approve an email, my phone captures one or more JPEG still images. Human Confirmed creates a temporary face template from the current capture and compares it only with my enrolled face templates.

The temporary face template exists only while the comparison is performed. It is not saved to my enrollment or to the email attestation and is discarded after the verification operation.

Video is not uploaded or stored. If a facial verification attempt fails, Human Confirmed does not retain the JPEG or temporary face template from that failed attempt.

4. Image retained with a successfully approved email

If facial verification succeeds, the JPEG used for the successful verification is encrypted and stored with an attestation for that email.

A recipient who possesses a copy of the corresponding email that matches the approved message may be shown this image when verifying the Human Confirmed attestation. I specifically consent to this limited disclosure of my successful verification image to recipients who possess a matching Human Confirmed email during the attestation period.

The image is not publicly accessible and possession of the image alone is not proof that I approved an email. Human Confirmed does not disclose my enrolled face templates to email recipients.

5. Information stored about the email

Human Confirmed does not store the readable contents of my email as part of the biometric attestation. Instead, it stores cryptographic fingerprints that allow Human Confirmed to determine whether a recipient’s copy of the message matches the message I approved.

Human Confirmed does not store email attachments as part of the facial attestation.

6. How long my biometric enrollment is retained

My biometric enrollment remains active for the inactivity period established by my company administrators. That period is measured from my last successful Human Confirmed facial verification.

Each successful facial verification restarts the inactivity period. When my enrollment expires because of inactivity, my stored enrollment face templates are deleted and I must enroll again before using Human Confirmed to approve another message.

If my enrollment is revoked or replaced, it immediately stops being available for future facial comparisons. The biometric information associated with that enrollment, including my enrolled face templates, will be permanently deleted within 30 days.

7. How long an approved-email image is retained

An email attestation is retained for the period established by my company administrators after the email is approved.

During this period, an eligible recipient may use Human Confirmed to verify the message and view the facial image associated with the successful verification. After the attestation expires, the verification link no longer confirms the message and the facial JPEG associated with the attestation is automatically deleted.

Deleting or expiring my enrollment does not automatically invalidate a still-active attestation for an email I previously approved.

8. Where my information is processed

Human Confirmed is hosted on Amazon Web Services infrastructure located in the United States. My facial images and biometric information may therefore be transmitted to, processed in, and stored in the United States.

If I am located in Canada, I understand that information processed or stored in the United States may be subject to lawful access by U.S. authorities in accordance with applicable U.S. law.

Microsoft Entra ID or Google Workspace may provide identity information used to associate my Human Confirmed enrollment with my organizational account, but Human Confirmed does not send my camera images or face templates to Microsoft Outlook, Gmail, Microsoft Entra ID, or Google Workspace.

9. How my biometric information is protected

Persistent face templates and stored attestation JPEGs are encrypted using authenticated AES-GCM encryption. Encryption keys are protected using AWS Key Management Service. Human Confirmed databases and underlying AWS storage are also encrypted at rest.

Access to biometric information is restricted to authorized systems and personnel who require access to operate, secure, or support Human Confirmed.

10. Disclosure of biometric information

Human Confirmed does not sell, lease, trade, or otherwise profit from my biometric information.

Human Confirmed does not disclose my face templates to third parties except where disclosure is necessary to operate the service on behalf of my organization or where disclosure is required or expressly permitted by applicable law or legal process. My successful verification JPEG may be disclosed to recipients only in the limited manner described above.

11. Withdrawing my consent and requesting deletion

I may withdraw my consent to future biometric verification. I may also request deletion of my biometric information by contacting my organization’s Human Confirmed administrator or the Applied Recognition Privacy Officer.

When an authorized deletion request is processed, Human Confirmed removes, as applicable, my enrolled face templates; facial JPEGs associated with my email attestations; facial-verification session scores; and other biometric information associated with my Human Confirmed enrollment.

Human Confirmed records an audit event showing that the deletion occurred. Non-biometric audit information may be retained where necessary for security, accountability, contractual, or legal purposes.

12. Choosing not to use biometric verification

Providing biometric consent is my choice. If I do not consent, or if I later withdraw my consent, I will not be able to use Human Confirmed’s facial-verification method to approve emails.

Where applicable law requires an alternative to biometric verification, my organization will provide a non-biometric method for performing the applicable function. I may contact my organization’s administrator to ask about available alternatives.

13. Changes in purpose

My consent applies only to the purposes described in this document. If Human Confirmed materially changes the purposes for which my biometric information is collected, used, disclosed, or retained, Human Confirmed will not rely on this consent for the new purpose. Where required, I will be presented with an updated notice and asked to provide new consent before the new processing occurs.

14. My acknowledgment and consent

By selecting “I Consent and Enroll”, I confirm that I have read and understood this Biometric Enrollment Consent and Release; understand the facial and biometric information Human Confirmed will collect and create; understand the specific purposes, retention periods, limited disclosure of the successful verification image, U.S. processing, and my right to withdraw consent and request deletion; and freely and expressly consent to the collection, creation, storage, use, processing, and limited disclosure described here.

Consent record

Human Confirmed records the consent version, date and time, authenticated organizational identity, organization or tenant, the enrollment and attestation retention periods presented, and the affirmative acceptance of the consent.

Questions or privacy requests

Privacy Officer
Applied Recognition Corp.
700 Third Line
Oakville ON Canada
L6L 4B1
privacy@appliedrec.com

For additional information, see the Human Confirmed Privacy Notice.