How is biometric data handled and configured?

The only stored biometric data currently is the facial recognition data; this can be stored as an encrypted template either locally on mobile device, or centrally on the server. The behavioural and contextual information on the other hand is entirely taken care of in the OneSpan Risk Analytics component which will store, aggregate and enrich the about a user and his devices in order quickly reference when required either by the machine learning or the expert rules. The data is collected securely on the device with three different components (multi-factor framework, RASP and client device data collector) and is then sent to the server component in an encrypted secure channel message to ensure data integrity, confidentiality and authenticity.