Data sovereignty
Authpermit owns the platform. You own the data.
Four deployment modes
Cloud (Authpermit-managed, contractually yours), Sovereign (your storage bucket and keys), Private (your Postgres, storage and inference behind authpermitd) and Air-gapped (control channel only).
Envelope encryption per domain
Identity, document, biometric, credential, security and storage each have their own data key. Rotate one, revoke one, or hold your own in your KMS/HSM.
Biometrics never leave the boundary
Face templates are opaque references under a dedicated key; raw material is discarded per your retention policy or never leaves your environment.
Data lineage and access log
Where did this claim come from, who processed it, who accessed it. Answerable for every record.
No training on your data
A platform-level setting, off by default, auditable.
Customer data API
Query, export, delete, archive and audit your own data at any time.