Frequently asked questions
Straight answers about liveness, ID documents, security, LGPD (Brazil's data protection law) and pricing.
What is liveness?
It's the check that a live person is in front of the camera, not a printed photo, a screen, a recorded video or a mask. Here it's both passive (the image) and active (randomized gestures in every session).
Do I need to install an app?
No. Capture runs in the browser on a phone or a computer. For native apps, your SDK sends the video with the same single-use token.
Does it compare against the ID document?
Yes. At account opening, the face is matched against the photo on the ID; we read the passport MRZ and the QR code on the digital CNH (Brazilian driver's license). After that, face authentication compares against the face enrollment we captured ourselves — more accurate than the ID photo.
Why doesn't the page show whether it passed?
Because the page is in the hands of whoever is in front of the camera — who may be a fraudster. The decision goes to your server, and you decide what to tell them.
What is the receipt?
The record of each decision: the score for each check, the threshold used, the model version and the media hashes, signed with your organization's Ed25519 key. Anyone can verify it with the public key, without calling us.
Are you certified?
Not yet. The product follows the requirements of ISO/IEC 30107-3 and the standards listed under Security; this is self-declared conformance by Catalisa, not lab-tested or certified. iBeta certification is on the roadmap.
Do you use third-party AI?
We use open-weight models (detection, liveness, facial landmarks and matching) running on our own infrastructure. No face image is ever sent to an external service.
What about LGPD?
A mandatory purpose on every session, hashed CPF (Brazilian taxpayer ID), configurable retention, per-subject reports and deletion, and human review for inconclusive cases (art. 20).
Can I adjust the gestures and timing?
Yes: how many gestures, which ones, how long each lasts, thresholds, blocking by CPF and retention — from the console or the API, with no deploy.
How much does it cost?
Free up to 30 verifications a month, forever. Beyond that, plans start at R$ 199 — and only verifications that reach a decision count.
Can I run it in my own environment?
Yes. Besides Catalisa Cloud, the platform can be installed in your data center or private cloud, under your brand. Capture, models and images stay in your environment, never passing through third-party servers. The API and the receipt are the same, so you can start in the cloud and migrate later.
Does data leave Brazil?
No. Catalisa Biometrics is a Brazilian product with its own engine, running on Catalisa infrastructure in Brazil. No face image is sent to vendors abroad.