LiveDoes verification send our video to a vendor?
The analysis runs where the person is
No frames, no audio, no face mesh leave the device. What crosses the wire are floating-point scores and hardware booleans — which is why this survives a privacy review.
What actually crosses the wire
Face and voice analysis runs in the page. The engine emits liveness scores, frequency sub-scores, pulse confidence and hardware booleans. There is no endpoint that accepts media, so this is not a policy that could be quietly relaxed.
Signals travel on a sideband WebSocket rather than inline with the decision call, so telemetry loss degrades verification without touching your transaction path.
Credentials are stored only as SHA-256 digests, so a database dump yields nothing that can be authenticated with.
Check it yourself
The artifacts behind this page
- Put a proxy in front of the sideband connection and read the payloads — small JSON objects of numbers.Privacy model →
What this page does not claim
Limits
- On-device analysis is a privacy property, not an integrity one. A compromised endpoint can lie about its own signals — which is why the device anchor and capture attestation are verified server-side rather than trusted from the client.