This is the full text published in the Phase 7 package. Effective dates, responsible contacts and contract-specific parameters are maintained in the corresponding release and deployment records.
Scope and entry conditions
This document applies to Trusted Palm ID within a defined organization. The marketing website does not capture palms. Before real processing begins, the project owner must confirm the purpose, population, processing basis and contractual scope in a deployment annex.
Roles and accountability
The relying organization and Mobile-ID document roles for the actual activities; neither party is automatically assigned the same role for every deployment. Device suppliers access data only within an explicit authorization. Each support request records the approver, affected device and access trail.
Data categories and minimization
The processing inventory distinguishes RGB/IR images, biometric references, identity references, binding records, notice/consent records, device context and evidence. Every field needs a defined use. Entire clinical, academic or employment records must not be copied into the biometric vault.
Capture and identity binding
An operator or approved self-service flow opens enrollment only after identity proofing. eID, SSO or ShareInfo results must be bound to a fresh session. Controls must establish that the identity holder is the person presenting the palm. Suspected substitution, duplication, expiry or rejected capture blocks activation.
Processing, matching and decisions
Quality, PAD and matching follow the approved sensor/algorithm profile. A 1:N search must not silently expand into another customer population. Identity results remain separate from authorization; the business system still checks the order, examination, shift or transaction conditions.
Processing location and use limitations
The annex identifies edge/server processing, storage locations and transmission paths. Under Mobile-ID's confirmed model, data does not leave the customer environment by default. Support access, transfers and subprocessors need separate assessment and approval. References must not be repurposed for training or cross-domain tracking beyond the permitted purpose.
Retention, rights and termination
Raw images are not retained by default; exceptions need a purpose, limit and authorization. References and related records follow separately approved schedules. Consent withdrawal, binding revocation and data deletion are distinct coordinated actions. Contract termination requires a handover record, access revocation and disposition of copies.
Exceptions and assurance records
People unable to use palm need an alternative that does not automatically deny essential care or services. Logs keep minimal references to purpose, session, configuration, decision and approval where applicable. Responsible staff review exceptions, access and deletion completion before closing the request.
Responsibility & deployment annex
Detailed responsibilities are determined by activity and deployment records; this public document does not replace customer-specific contractual annexes.
- The relying organization defines business purposes, populations and operational authority within the deployment.
- Mobile-ID supplies and operates components within the agreed scope, including integration, control configuration and related evidence.
- Device suppliers support models, firmware, SDKs and maintenance within authorization; data access is never implicit.
- Legal, security and service ownership assignments are maintained in each organization’s operating records.
Execution and evidence cycle
- Record purpose, organization, data/device scope and the business reference.
- Verify authority, applicable conditions, configuration and relevant obligations.
- Execute with data minimization, authorization and necessary evidence.
- Close with confirmations from relevant systems, response handling and remaining exceptions.
Legal and reference sources
Detailed obligations, periods and exceptions apply according to law, contract and the actual service configuration.