Attendance server
- Servers in the European Union (Frankfurt).
- Tablet access tokens are stored only as a hash (SHA-256), never as a password.
- Keys for checking PINs on tablets are not stored — they are derived on every use.
Security & data protection
Your people’s data, kept safe.
Attendance shows who came and left when and where they worked. That is personal data — and with Face ID, biometric data too. Here is how we handle it.
Servers in the EUFrankfurt
Encrypted connection onlyHTTPS
Biometricsonly with consent
ISO 9001certified quality
Quality
ISO 9001 certificate and quality policy
ENEXI’s quality management system is certified to ISO 9001. Our quality policy is public — you can open both documents as PDF.
GDPR
Where each piece of data lives
Tablet terminal
Coming soon- The employee list, waiting records and face templates are encrypted (AES-256-GCM).
- Keys live in the device’s secure storage (Android Keystore, Apple Keychain).
- Terminal data is not backed up to the cloud or to other devices.
Face ID
Coming soon- Only with the employee’s explicit consent, signed with a finger; it can be withdrawn at any time.
- Online recognition runs in the EU (Frankfurt). The terminal never stores face photos.
- Offline face templates (at most 5 per person) stay encrypted on the tablet only.
Personal terminal on the phone
Coming soon- The face or fingerprint is checked by the iPhone itself.
- The employer receives no biometric data, only a signature from the secure chip.
- Each device can be revoked separately.
What we never store
Some things we simply don’t want to have.
Face photos
The camera frame is overwritten in memory after verification; the terminal never saves it to disk or to the server.
Plain PINs
The tablet only knows PIN hashes with its own key. PINs are never written to the queue or the log.
Names in the app log
The terminal’s technical log contains no names, employee numbers or PINs.
Access
Everyone sees only what they need.
A tablet sees only its site
The tablet takes its site and company from its own access, not from the request — it can’t see other companies.
Role-based permissions
Who may enable Face ID, approve records or revoke a tablet is set by roles in the admin.
Tablet log
Tablet events (connection, revocation, re-pairing) are logged and deleted after 180 days.
Lost tablet
A tablet can be revoked remotely; its data is wiped at the next connection.
NIS2 & audit
Audit documentation is ready.
The new terminal comes with security documentation as a basis for audits, GDPR and NIS2:
- what data is processed and where it is stored
- what is never stored and how data is transferred
- access permissions
- risks and measures
- component versions for the asset register
We’re happy to share it with your data protection officer or auditor.
A question about security?Write to us — we’ll answer with documentation.[email protected]+421 905 249 900