In short
Data is encrypted in transit, access is role-based and logged, face templates are kept only while an employee is enrolled plus 90 days, and nothing is sold or used for advertising. Hosting details are not published here; they are covered directly with customers during a security review.
How face data is handled
- On the device where possible. Where the device supports it, the face match runs on the phone or kiosk and only the result (match or no match) is sent to Ankastra's servers.
- Encrypted when sent. Where an organisation turns on cloud verification, the face template travels over encrypted channels.
- Kept for a fixed period. Face data is kept while the employee is enrolled plus 90 days, or longer only if your record-keeping obligations require it, then deleted or irreversibly anonymised.
- One purpose. Face data is used for attendance and identity verification only: never for advertising, profiling or marketing.
- A non-biometric option. Employers should offer employees an alternative (PIN, card or manager-marked attendance) where the law requires it. Ankastra also records attendance from RFID cards and biometric terminals.
Security controls
- Encryption of sensitive data in transit.
- Role-based access control, with multi-factor authentication where available.
- An audit trail on attendance: every edit records the user, the time and a reason.
- Security event logging, monitoring and intrusion detection.
- Regular vulnerability assessments and secure development practices.
- Backups and disaster recovery, with backups under the same controls.
- Security training and confidentiality agreements for staff.
Encryption at rest is applied where implemented, as our privacy policy states. Ask us for the current position for each data store as part of your security review.
How long data is kept
| Data | Default retention |
|---|---|
| Face verification data | Active enrolment + 90 days |
| Attendance records (non-biometric) | Employment + 7 years, or as labour and tax law require |
| Payroll records | Employment + 7 years, or as tax law requires |
| Attendance location logs | 180 days, unless your organisation sets longer |
| Visitor records | 12 months |
| Device, crash and security logs | 12 months |
| Account credentials | Life of the account + 30 days |
When a subscription ends, data is processed only as the law and the contract allow until these periods run out, then deleted or anonymised. The full schedule is in section 13 of the privacy policy.
What we share in a security review
- Send your vendor security questionnaire to hello@ajinkyatechnologies.in or through the contact page.
- We agree an NDA before sharing anything not published here.
- We answer the questionnaire in writing, covering topics such as sub-processors, encryption at rest, backup and recovery, and incident response.
- Your IT team can take follow-up questions to a call with us.
On the enterprise plan, on-premise or hybrid deployment keeps the data on infrastructure you control. See Ankastra for multi-plant groups.
Who is responsible for what
Your organisation decides why employee data is processed and is responsible for informing employees and obtaining any consent the law requires, including for biometric attendance. Ankastra processes the data on your behalf, under your contract and our privacy policy. Employees can ask their administrator to correct or delete their face data.
To report a security issue, write to hello@ajinkyatechnologies.in with "Security" in the subject line.
Questions people ask
Is face data stored on Ankastra servers?
Where the device supports it, matching runs on the device and only the result is sent. If an organisation turns on cloud verification, the face template is sent over encrypted channels and stored under the safeguards on this page.
How long is face data kept?
For the employee's active enrolment plus 90 days, unless the employer's record-keeping obligations require longer, then it is deleted or irreversibly anonymised.
Where is the data hosted?
Hosting details are not published on this website; they are discussed directly with customers during a security review. Enterprise customers can also choose on-premise or hybrid deployment on infrastructure they control.
Can employees opt out of face recognition?
Employers should offer a non-biometric alternative where the law requires it. Ankastra also records attendance from RFID cards and biometric terminals.