ID Scan Privacy & Retention

SecurePoint only keeps the minimum information necessary to help your front desk confirm a visitor’s identity and print their badge. We do not store full document images or transmit raw data to the browser.

What we keep

Visitor name (first / last)
Document type and issuing state
Date of birth, if present
Last four digits of the document number (hashed in storage)
Optional badge photo when the visitor opts in

Temporary storage

Camera frames are processed in memory and discarded. Temporary uploads are retained for at most 30 minutes and purged automatically. Badge photos are stored in a private Supabase bucket and accessed only through short-lived signed URLs.

Third-party processors

We use OpenAI Vision (gpt-4o) under SecurePoint’s zero-data-retention policy to extract text from IDs. Supabase hosts our encrypted storage and database. No other downstream processors receive ID data.

Questions? Contact your SecurePoint administrator or review the internal policy memo in docs/PRIVACY_ID_SCANNING.md.