Consent first. Deletion when you ask. Nothing hidden.

Consent comes before identification

• Nobody is identified without a consent on record. People are added with their consent, and the date and method are kept.
• A consent form and a written biometric policy come with every site, with your company name filled in. Have your attorney review them for your business.
• People who do not consent are simply not enrolled, and can use the manual sign-in entry.

What is kept, and for how long

• Your video stays on your network. The box on your premises finds faces and sends only small face crops to your private site. Full frames leave only when someone opens the live view, and only while it is open.
• Camera images are kept 60 days by default and then removed automatically. Crops of unrecognized faces are kept for 7 days by default.
• The attendance record stays, because it is a payroll record. Face data for someone who has not been seen for 24 months is removed.
• Deleting a person deletes their face data. Their attendance history is kept.

Who can see it

• A separate private Azure environment for each customer, in the United States: its own database, storage and key vault.
• Sign-in is limited to the people you list by email address or company domain, with Microsoft sign-in. Administrators manage people and settings; everyone else can view.
• An audit log records who added, confirmed, exported or deleted what.

What this is, and is not

Summit Attendance records who was on site. It is not a payroll system, and it is not legal advice. You are responsible for your policy and for telling your team; we provide the tools and the documents. We sell it in Colorado only, because other states have different biometric rules.