Engineered so your biometric stays strictly yours.

When you enrol, the sensor reads your subsurface vein pattern and converts it into a 256-bit encrypted mathematical template — a series of irreversible numbers describing geometric intersections.

We never capture, store, or transmit an image of your hand. The math template cannot be reversed or reconstructed into a photograph or physical facsimile.

Templates are encrypted using AES-256-GCM right on the device secure element before transmission, and sent over TLS 1.3 channels. Keys are rotated regularly using FIPS 140-2 Level 3 hardware security modules (HSM).

Only the matching engine in an isolated secure enclave can evaluate templates. Veinz engineers and staff have zero access to raw biometric data.

Before enrolment, every user sees a plain-language summary explaining what is scanned, why, and how to delete it. For students and minors under 18, verifiable parental/guardian consent is mandatory.

Participation is strictly voluntary. Any user who prefers not to use biometrics is provided an alternative RFID badge or mobile credential by their organization without penalty.

Under India's DPDP Act 2023, you have absolute ownership over your data. Request a copy of your logs or demand immediate deletion through your organization admin or by emailing privacy@veinz.co.

Upon withdrawal, your biometric template is cryptographically purged across all active devices and backup vaults within 48 hours.

All Veinz customer data and cryptographic templates reside exclusively within enterprise-grade, MeitY-empanelled cloud data centers in Mumbai and Hyderabad, India. Biometric data never crosses international borders.

If a security incident or anomaly affects your data, we notify you and your organization leadership promptly without legalese: what happened, what systems were affected, what containment steps were executed, and who to contact 24/7.

Veinz architecture is designed in strict adherence to India's Digital Personal Data Protection Act (DPDP) 2023, CERT-In cybersecurity directives, and ISO/IEC 27001 / SOC 2 Type II operational standards.