Skip to main content

Face Recognition - Data Handling

The Face Recognition & Search addon processes facial data using advanced machine learning. This page explains how we handle that data to ensure privacy, security, and compliance.

Data Collection and Storage​

  • Facial Embeddings: Our system uses face embeddings or vectors. These are mathematical representations of facial features, not directly identifiable images.
  • Purpose-limited Storage: Embeddings are stored for face matching only.
  • Encryption: All facial data is encrypted at rest and in transit using industry-standard encryption protocols.
  • Data Separation: Customer data is logically separated to prevent unauthorized access.
  • Search Images: Input images provided for search are discarded when the search request completes. These images are not retained by the system.
  • User Data: Face Recognition & Search Addon does not store any metadata except the Face Embeddings to provide face recognition and search.

Data Retention and Deletion​

  • Data Retention: Retention is under your control. Face embeddings are kept, encrypted at rest, until you delete them.
  • Data Deletion: Face data is purged when you delete the asset, or when you call the Face Data Delete API for an asset you keep.

Security and Compliance​

  • Infrastructure: We use AWS infrastructure, which adheres to strict security standards and best practices.
  • Independent Review: Our system has undergone a well-architected review by an independent, AWS-approved reviewer.
  • Compliance: We comply with relevant data protection regulations (e.g., GDPR, CCPA) as applicable.
  • Privacy Agreement: Our SaaS agreement includes comprehensive privacy clauses signed by all parties.

Transparency and Control​

  • Audit Logs: We maintain detailed logs of all data access and processing activities.
  • Access Controls: Strict role-based access controls are in place to limit data access to authorized personnel only.
  • Customer Control: You have control over when facial recognition is applied to assets and can request data deletion at any time using the Deletion API.

Responsibilities​

  • You are responsible for:

    • Ensuring privacy and data compliance of images used for Face Recognition
    • Calling Face Data Delete API to delete a Face Embedding

  • We are responsible for:

    • Providing Face Recognition and Search securely using secure access protocols
    • Storing Face Embeddings encrypted at rest
    • Deleting Face embeddings when Face Data Delete API is called