Preview
Coming 2027
oOsiris
Sovereign infrastructure for biometric eID
oOsiris is a complete solution of smart badges and access points bringing GDPR-compliant biometric control to enterprises and governments. An end-to-end secure ecosystem featuring enrollment, credential issuance, authentication, management, revocation and replacement.
FIDO2 Passwordless authentication
Secure physical access control
Electronic signature and anti-deepfake
No exposure, no data leakage
Designed and made in France
A turning point for digital identity, focused on security and trust.
Passwords remain the weakest link: stolen or guessed credentials are the most common way in, in 22% of breaches (Verizon DBIR 2025), and centralized biometric databases keep getting breached. A leaked biometric cannot be reissued. In France, manipulation fraud reached €516 million in 2025, up 34% in a year (Banque de France, 2025 report): everything that can be dictated can be stolen.
oOsiris keeps biometrics in the user’s hand. The match runs inside the badge, and no biometric data ever leaves it: only a signed yes or no.
Physical access control
The badge proves who is at the door and that the holder is physically there, not only that a credential was presented. It works hands-free with oOsiris door readers (UWB), which connect to your existing access control panels (OSDP, Wiegand). There is no biometric database to breach.
Logical access control
Log in to workstations, VPNs and online services with FIDO2 passwordless authentication. The badge releases the key only after the holder’s biometric match.
Electronic signature
Sign documents with a key that only the verified holder can release: each signature needs the holder’s code and biometric match.
Age verification
A signed yes or no to a question such as “over 18?”, computed inside the badge. The date of birth is never revealed, and the check is anonymous, with double anonymity: the website never learns who you are, and no one learns which website asked.
Anti-deepfake
The badge accepts a capture only from a GripID-certified camera: a deepfake injected into a video stream or a webcam is refused. Cameras add liveness detection against photos, videos and masks.
AI-proofing
A cryptographic proof that a real person authorized an action: sign prompts and authorize AI agents.
A trusted secure infrastructure.
The badge holds the eID, the biometric template and the matcher. A smart camera captures the biometrics and sends it to the badge over a secure channel for local comparison. Biometric data is never stored or sent to a server.
- Sovereign hardware and software infrastructure
- FIDO2, eIDAS 2 ready, GDPR compliant by design
- Personal eID badge: EAL6+ secure element with match-on-card
- Smart cameras: dual-iris and face capture with liveness detection
- Identity certificate: a national eID when the holder is enrolled by a qualified trust service provider (QTSP), otherwise an eID from your own PKI; SaaS or on-premise
- Biometric template under the holder’s exclusive control (“type 1” biometrics as defined by the CNIL)
- The holder can erase their biometrics from the badge themselves, in front of a GripID camera
- Every verdict is signed by the badge and checked by the door, camera or counter that receives it, and UWB ranging rejects a relayed badge
- Designed in France, to be manufactured in France
oOsiris ID Card
The secure badge carries the identity, the biometrics and the matcher, on an EAL6+ secure element with match-on-card.
The secure badge carries the identity, the biometrics and the matcher, on an EAL6+ secure element with match-on-card.
oOsiris Authenticator
Smart biometric camera with dual-iris and face capture, anti-spoofing and UWB.
Smart biometric camera with dual-iris and face capture, anti-spoofing and UWB.
How it works
A single secure chain.
From enrollment to proof.
The secure badge carries the digital identity (eID), the biometrics and the matcher. The smart camera captures the biometrics, sends them to the badge over a secure channel and receives a signed yes or no.
1
The user activates their badge in front of the smart camera.
2
The smart camera captures dual-iris and facial biometrics.
3
The smart camera sends the encrypted template to the badge.
4
Biometric match is performed inside the badge’s secure element.
5
The badge issues a one-time proof for that single operation.
6
The user can log in, open a door or sign a document.
Use case: banking
Securing a sensitive bank transfer
Every step is proven by smart camera biometric scan and match on card. The badge is owned by an employee, with their biometrics securely bound at enrollment.
1
Arrival: A face check at the door, for secure and easy access.
2
Workstation login: The session opens hands-free, no password.
3
Entering the order: The employee validates and signs.
4
Dual control: A second validator signs with their own badge and face.
5
Proof: A signed proof per validation, linked to its holder.
What disappears
- Passwords on the workstation
- A lent or relayed badge
- Validation without the holder
What remains
- One signed proof per operation
- No biometrics outside the badge
The bank keeps control
- Badges assigned to the customer from the factory; the customer then installs its own certificate authority, so the badges join its PKI
- Authority keys held in HSMs, the GripID root key offline
- Enrollment only by secure stations, with the bank’s approval
- The bank operates its badges: no update without its signature
- Sovereign oOMS, as SaaS or on-premise
For the bank’s customers
- Remote proof of identity: KYC, sensitive operation, advisor call
- Passwordless login: a passkey tied to the bank, nothing to phish
- Operations: shown on the oOsiris Authenticator screen, validated and signed by the customer
- Against the fake advisor: no more code to dictate on the phone
oOMS: the oOsiris management system
oOMS manages the oOsiris badges. It is built on the SDMS core, with the identity and badge layer on top.
- Issues each badge: enrollment only at secure stations, identity read from the ID document and verified, certificates from your own PKI
- Runs the lifecycle: activation, renewal, revocation and end of life
- Applies your policy: which biometrics each holder presents, signed by your administrator through your HSM
- Certifies your doors, cameras and counters with your own authority
- Never stores biometrics. Every operation is logged. SaaS or on-premise, one tenant and one certificate authority per customer
Let's start from here
Ready to deploy?
Tell us about your project. From concept to field deployment,
our team is with you at every step.
Quality & Sovereignty