Try to swap a candidate.
Not an ID check. Not a deepfake detector. The same phone and face, every round.
- Screen
- Interview
- Offer
- Day 1
Recruiter call
AK
Round 1 · Screen
At the laptop
The phone that scans
AK
Halden Health
via Brightpath Staffing
AK
Your hiring gate
Waiting
Your systems get a signed receipt: round, result, key ID, time. No face image or pattern leaves the phone.
Held at Interview
Limits: it proves the same person, not who they are (your offer-stage ID check covers that), and who holds the phone, not who is on camera. Threat model and limits
For your security and privacy team
- Leaves the phone: a signed receipt (round, result, key ID, time). Ed25519 over RFC 8785 JSON, verifiable offline.
- Stays on the phone: the face pattern, sealed to a non-exportable passkey. No face image or pattern leaves the phone.
- No automated rejection: every hold goes to a recruiter or IT for a human decision.
- Not an ID check, a deepfake detector, or monitoring after sign-in.
Run this on your own reqs.
20 minutes with an engineer. Then a 30-day shadow pilot on live submittals: it counts what it would have held and blocks nothing. Candidate consent and notices apply from the first enrollment.