Tech Support : support@biometrica.com

Higher Education · CISO

The Lightest Security Footprint on Your Network

Each sensor transmits a single encrypted ~30KB JPEG per entry event. No video streams. No watchlist data on the device. No biometric templates stored. No on-premises server infrastructure. VLAN-segmented, PoE-powered, firmware-managed remotely. A compromised sensor reveals nothing because it stores nothing.

~30KB
Per Event

Single encrypted JPEG face crop per entry event. Typical 30KB, never exceeding 100KB. No video. No audio.

Zero
On-Device Data

No watchlists, no biometric templates, no images stored on the sensor. A compromised device reveals nothing.

SOC 2
Compliant Platform

Cloud-hosted matching infrastructure. Encrypted in transit and at rest. No on-premises server infrastructure.

VLAN
Segmented

Sensors operate on a dedicated network segment isolated from campus production networks.

Your Security Team Wants Facial Recognition. Here Is Why You Should Say Yes to This One.

Every facial recognition proposal that has crossed your desk has had the same problems: massive bandwidth from video streaming, on-premises biometric template databases that create breach liability, IoT devices that store sensitive data and expand your attack surface, and a compliance profile that makes your General Counsel's head spin. Safience was designed by people who understand why you said no to every previous proposal. Here is the technical architecture that changes the calculation.

  1. Bandwidth: Kilobytes, Not Megabytes

    Traditional video-based facial recognition streams 4K video from every camera to on-premises or cloud processing. That is megabytes per second per camera, across dozens or hundreds of cameras, on a campus network already contending with academic, research, and administrative traffic. Safience transmits a single encrypted JPEG per entry event. Typical size: ~30KB. A sensor generating 100 events per hour transmits approximately 3MB per hour total. An athletic venue with 20 gates processing 80,000 fans generates single-digit megabytes per hour across all gates combined. Your network team will not notice it.

  2. Device Security: Nothing to Breach

    Traditional biometric systems store watchlists, templates, and configuration data on edge devices. A compromised device exposes the entire watchlist and every template in its database. Safience sensors store nothing. No watchlist data. No biometric templates. No configuration that reveals matching criteria. No persistent storage of any kind. The image is captured, encrypted, transmitted, and deleted from the device immediately. If someone steals a sensor, they have a piece of hardware with no data on it.

  3. Infrastructure: Zero On-Premises Servers

    Traditional deployments require on-premises server infrastructure for matching, storage, and management. That means server rooms, UPS, HVAC, physical security, and IT staff to maintain it. Safience is entirely cloud-hosted. SOC 2-compliant infrastructure. Your campus provides network connectivity and physical mounting points for sensors. Safience provides everything else. Firmware updates are managed remotely with zero on-campus IT labor.

  4. Compliance Architecture: BIPA, FERPA, CCPA

    The compliance problem with traditional biometric systems is that they create the data that privacy regulations restrict. Biometric templates stored on premises are subject to BIPA. Video recordings reviewed in student conduct proceedings become FERPA records. Safience creates none of this data. Non-match images are deleted instantly. No biometric templates are created or stored. No video is recorded. The data that triggers regulatory exposure does not exist.

  5. IoT Management: PoE, Remote-Managed, Tamper-Resistant

    Purpose-built edge sensors, not repurposed IP cameras. Power over Ethernet — single cable for power and data. Indoor and outdoor models with tamper-resistant housings. Firmware updates managed remotely by Safience. No on-campus IT staff required for maintenance. Network provisioning is your only on-boarding task: assign a VLAN, configure firewall rules, and mount the sensor.

Traditional Facial Recognition vs. Safience Architecture

Technical Dimension Traditional FR System Safience RTIS/RVIS
Bandwidth Per Camera Megabytes/second (4K video streaming) ~30KB per event; ~3MB/hour at 100 events/hour
On-Device Data Watchlists, templates, configuration Zero persistent data; encrypted, transmit, delete
Compromised Device Exposure Full watchlist and template database Hardware only; no data to extract
On-Premises Infrastructure Servers, storage, UPS, HVAC, physical security None; cloud-hosted, SOC 2 compliant
Biometric Template Storage Templates created and stored on premises Zero templates stored anywhere for non-matches
Video Recording Continuous recording; massive storage requirements No video at any tier; single still image per event
Device Management On-campus IT staff; VMS licensing; NVR management Remote firmware management by Safience; PoE; zero on-campus IT labor
BIPA Exposure Template database creates class-action-ready liability Zero templates = zero regulatory trigger
FERPA Exposure Video reviewed in conduct proceedings becomes education record No video recorded; no footage to classify
Third-Party Data Exposure Algorithm providers may receive or retain identity data Zero identity data shared with algorithm providers

Technical Components

The Safience architecture consists of five independent layers with separate access controls. Only the sensor layer touches your campus network.

RTIS/RVIS Edge Sensors

Purpose-built edge capture devices

Not repurposed IP cameras. Purpose-built hardware for single-image capture. PoE powered. Tamper-resistant housing. Indoor and outdoor models. Encrypted transmission via HTTPS/TLS. Zero on-device storage. The only Safience component that sits on your campus network.

Learn More

Cloud Matching Platform

SOC 2-compliant identity matching infrastructure

All matching occurs off-campus in cloud infrastructure. SOC 2 compliant. Encrypted at rest. Simultaneous RTIS threat and RVIS victim matching. Non-match images deleted immediately. No persistent data for non-matches at any layer.

Technical Details

RAC: Rapid Action Center

24/7 human verification

Every candidate match is verified by a trained analyst before any alert reaches your campus. Mandatory, not optional. RAC analysts cannot access institutional data or student records. This layer eliminates false-positive liability.

Technical Details

Bring Your Hardest Technical Questions.

Schedule a Technical Architecture Review. Walk through the data flows, network specifications, encryption architecture, device management model, and compliance alignment with your security and infrastructure teams. We built this platform for the CISOs who said no to every previous facial recognition proposal. Ask why this one is different.