When a user enrolls, their face is captured directly on their device. Crucially, Keyless never sees or stores this raw biometric data. Instead, a device-specific secret is created.
Going forward, authentication can only be successfully carried out on that specific device - unless the user allows an additional device to be linked to their account.
Customers can also set up a PIN and user ID for future enrollments using the Keyless SDK.