Quality & Sovereignty
Security Architecture
One security framework for every device and service
GripID security is built in three layers shared by the whole ecosystem: hardware, firmware and application. It covers our biometric devices and badges, the SDMS and the GripID Bridge app, and it supports customer-owned PKI and sovereign key management.
Hardware, firmware and application layers
Signed firmware and updates
SaaS or on-premise deployment
Customer-owned PKI supported
Security designed for sovereign deployments
The framework has three layers. Hardware: EAL6+ certified secure elements generate and protect the private keys and carry out the sensitive operations. Firmware: secure boot, signed firmware, over-the-air updates and secure communication. Application: data encryption and SDK and API integration.
Built for institutions that need control of their trust chain. Each deployment can run as SaaS or fully on-premise, with a PKI operated by GripID or owned by the customer.
Administrators sign in through your identity provider, and every administration, license and update operation is logged and can be exported. The SDMS never stores biometric data.
- EAL6+ certified secure elements for keys and sensitive operations
- Private keys generated and protected in hardware
- Secure boot, signed firmware and signed updates
- Secure communication and data encryption
- Customer-owned PKI and sovereign key management
- Designed in France
Hardware root of trust
EAL6+ certified secure elements generate and protect the private keys and carry out the sensitive operations. The requesting system only receives signed results, never the keys.
Firmware and updates
Secure boot on the device. Firmware and packages carry GripID’s signature and the customer’s, licenses are signed by GripID, and everything is verified before installation, with automatic fallback and anti-rollback. Updates are deployed through the SDMS or the GripID Bridge app.
PKI and key management
A GripID PKI proves where a device comes from and signs firmware and licenses. A separate PKI issues the certificates used in your environment, operated by GripID or owned by the customer on-premise.
The SDMS manages the fleet from one console: configuration, licenses, signed updates, certificates and audit log, with access through your identity provider.
Secure communication
Devices, apps and services exchange data over secured channels. Data is encrypted, and biometric templates are encrypted before any local comparison.
Let's start from here
Ready to deploy?
Tell us about your project. From concept to field deployment,
our team is with you at every step.