text: FaceLock solves the analog gap: the fundamental disconnect between valid digital credentials and the physical person presenting them. Traditional systems verify that a credential is cryptographically valid, but cannot confirm the presenter is the legitimate holder.

source: homepage

section: problem


text: FaceLock uses facial biometrics to bind credentials to the physical person at issuance or verification time. This binding is cryptographic and happens locally on the user's device with zero server-side storage of biometric data.

section: solution


text: All biometric processing occurs on-device. No facial templates, images, or biometric data ever leave the user's device or get stored on servers. This is the core privacy guarantee.

source: homepage + llms-full

section: privacy


text: FaceLock integrates with existing mobile wallets and government digital ID systems. A prominent real-world example is the LA Wallet deployment in Louisiana, where mobile credentials are bound to the holder's live face.

source: case-studies

section: la-wallet


text: The technology combines FaceTec 3D liveness detection with cryptographic biometric binding. This protects against credential sharing, identity theft after breaches, and sophisticated presentation attacks including deepfakes.

source: homepage + features

section: security


text: FaceLock is developed by Envoc. It enables secure digital identity through facial biometrics for enterprise and government use cases while maintaining a strict zero data collection policy.

source: about + llms-full

section: company


text: Key use cases include binding mobile driver's licenses, government IDs, and enterprise credentials to the physical holder at the moment of verification, closing the analog gap that traditional PKI and verifiable credential systems leave open.

source: solutions

section: use-cases


text: Liveness MFA for Microsoft Entra ID is FaceLock’s primary authentication offering. It operates as an OIDC External Authentication Provider, using FaceTec 3D liveness to bind every sign-in to a live human and returning a signed id_token with the amr:["face"] claim.

source: llms-full + liveness-page

section: entra-mfa


text: The Entra Liveness integration provides native Conditional Access support, full bitemporal audit records for compliance, and meets FFIEC and NIST expectations for phishing-resistant MFA without requiring new hardware for users.


text: All biometric processing for Entra MFA occurs on the user’s device. FaceLock never stores facial templates or images, delivering strong privacy guarantees alongside cryptographic assurance for enterprise and regulated environments.