UNICUS by Tekbees
Trust center
How we protect the information and biometric data processed in UNICUS by Tekbees.
Security on AWS
- UNICUS runs on Amazon Web Services (AWS) cloud infrastructure.
- Data is encrypted in transit and at rest with keys managed in AWS KMS; demographic data is stored separately from biometric templates.
- Access controls, monitoring and separated environments.
- Staff trained in information protection.
ISO/IEC 27001 ISMS
- We are implementing an Information Security Management System (ISMS) under ISO/IEC 27001.
- Implementation is in progress.
Certified biometrics
- 3D face liveness uses FaceTec technology, certified by iBeta at Level 1 and Level 2 under ISO/IEC 30107-3.
- UNICUS verifies with 3D face and fingerprint.
Biometric retention and deletion
- The client, as data controller, sets the retention period in the data processing agreement.
- When it ends, data is securely deleted or irreversibly anonymized.
- Tekbees never sells, rents or trades biometric data, nor shares it for advertising.
Data location
- UNICUS data is hosted on AWS in the us-east-1 region (Northern Virginia, United States).
- International transfers follow Colombian Law 1581 of 2012, Decree 1377 of 2013 and, where applicable, the GDPR.
Roles and sub-processors
- The client is the data controller and Tekbees acts as processor, following its instructions.
- Main sub-processors: AWS (infrastructure) and FaceTec, Inc. (3D face recognition technology).
- Clients can request the current list at privacy@tekbees.com.
Biometric data notice
- Who processes your data
- When you verify with UNICUS, the organization asking you to verify (our client) is the data controller. Tekbees acts as processor and follows its instructions.
- What data
- Data and images from your ID document, photos and video of the session, biometric templates of your face and, when used, your fingerprint, liveness and match results, and technical device and network data.
- What for
- To verify your identity and prevent fraud and impersonation in the process the organization tells you about.
- Your choice
- Biometric data is sensitive data: you are not required to authorize its processing. The organization must ask for your prior, express and informed consent.
- Your rights
- You can access, update, correct and delete your data, withdraw consent and ask for human review of a result, through the responsible organization or by writing to privacy@tekbees.com.
Evaluating UNICUS as a vendor?
Write to us and we'll send the security and data protection information you need for your due diligence.
Talk to the team