Privacy exposure
Central biometric stores concentrate sensitive data, regulatory risk and breach impact.
Privacy-first trust infrastructure
The right person. Not just the right pass.
PalmVault binds a credential to its rightful holder and verifies access or payment rights at the edge without sending biometrics to a central database.
On-device biometricsLocal decisionsOffline-first operation
- Person verified
- Entitlement checked
- Access authorised
The shift
Identity systems were built for a connected world.
Centralised access creates a single high-value target, and connectivity becomes a point of failure. PalmVault moves the critical trust decision closer to where it is needed.
Fragile access
When networks or cloud services fail, connected credentials can stop working at the moment they matter.
Weak binding
A valid pass does not always prove that the person presenting it is the person entitled to use it.
How it works
Prove the person. Validate the right. Act locally.
PalmVault combines on-device authentication, cryptographic proof and portable entitlement tokens in one privacy-first flow.
Challenge
The edge device issues a fresh cryptographic challenge for the session.
Authenticate
The user proves presence with their device biometric. The biometric never leaves the device.
Verify
The signed response and entitlement token are checked locally.
Authorise
The edge grants or denies access, service or payment according to embedded rules.
No central biometric database. No biometric images shared with the operator.Short-lived, revocable entitlements • Offline by default
Built differently
Privacy is the architecture, not a policy layer.
One trust layer for physical access and on-site payments.
The same locally verified entitlement can govern doors, devices, services, quotas and transactions at the edge.
Biometrics stay personal
Face or fingerprint verification happens through the user’s own device. PalmVault does not need a central biometric database.
Resilient by default
Local validation is designed to keep critical flows moving when the internet, cloud or central service is unavailable.
Where it matters
Designed for high-assurance environments.
PalmVault is for operators where identity, permissions and continuity are operational, not cosmetic.
Data centres & secure sites
Bind access rights to a live authorised person, with decisions made on site.
Construction & industry
Control time-bound, role-based access across changing workforces and restricted zones.
Defence & public safety
Maintain trusted access when connectivity is degraded, denied or deliberately disrupted.
Hospitality & smart buildings
Extend proven high-assurance infrastructure into frictionless everyday access and payments.
Build the trust layer with us.
We are speaking with pilot partners, access-control integrators and investors building the next generation of secure physical infrastructure.