POLICY CENTERPublic policies.
Public policies.
Clear scope.
The full text of 13 Trusted Palm ID policies is published in full on this website; organization- and contract-specific parameters are defined in deployment records.
Find by your task
Go directly to the relevant policy and procedure.
Policy register
The full text is published on this website; effective dates and deployment parameters are managed in the corresponding release records.
| Document | Scope | Version | Status |
|---|---|---|---|
| Biometric data processing | Proposed procedures from purpose definition through capture, matching and termination. | 1.0 | Published |
| Service privacy notice | Information to present before enrollment and use of palm services. | 1.0 | Published |
| Consent and withdrawal | Record informed choices by purpose and notice version. | 1.0 | Published |
| Retention and deletion | Manage retention by data category, copy and applicable obligation. | 1.0 | Published |
| Data subject rights | Receive, verify and track requests within the deployment roles and scope. | 1.0 | Published |
| Information security | Control access, information, change and support operations. | 1.0 | Published |
| Vulnerability reporting | Report concerns and coordinate assessment without granting testing permission. | 1.0 | Published |
| Incident handling | Classify, contain, investigate, recover and communicate under approved responsibilities. | 1.0 | Published |
| Service availability | Measurement, dependencies, maintenance and restoration under the applicable agreement. | 1.0 | Published |
| Support and escalation | Coordinate the customer, Mobile-ID and suppliers within agreed responsibilities. | 1.0 | Published |
| Acceptable use | Limit biometric identity use by purpose, authority and user rights. | 1.0 | Published |
| API security and use | Bind applications, organizations, purposes, devices and sessions before operations. | 1.0 | Published |
| Device trust | Manage devices from model selection through activation, maintenance, replacement and revocation. | 1.0 | Published |
Need to clarify applicability?
Contact Mobile-ID through the published channel; do not send palm images, biometric references or tokens through general email.