Security you can verify. Privacy you don’t have to trade.
This page is written for the person who evaluates vendors for a living: how Dapple’s architecture works, what we store (and refuse to store), which standards we build on, and where our compliance program stands.
No biometric database. Anywhere. Ever.
Most biometric systems store a template and compare against it — which makes the template a target. Dapple works differently.
Keys derived on demand
A user’s live biometric deterministically regenerates their cryptographic private key at the moment of authentication. The key is used, then discarded. The biometric is never persisted in any recoverable form.
Open standards
Authentication follows FIDO2/WebAuthn — the same phishing-resistant standard behind hardware security keys. Dapple is a FIDO Alliance member; we build on public cryptography, not security through obscurity.
Nothing worth stealing
No passwords, no shared secrets, no biometric templates, no synced key vault. A breach of Dapple’s infrastructure yields no credential material — by architecture, not by policy.
Where our program stands
We publish status honestly — including what’s in progress. Buyers deserve a roadmap, not a mystery.
Data handling
Dapple processes the minimum data needed to operate the service: account identifiers, device metadata, and authentication event logs. Biometric data is processed transiently on-device during key derivation and is never transmitted or stored. See our Privacy Policy for the complete inventory.
Security whitepaper
A technical whitepaper covering the key-derivation architecture, threat model, and cryptographic design is available for security teams under NDA. Request the whitepaper.
Responsible disclosure
Found something? We want to know. Report suspected vulnerabilities via our contact form marked “Security” and we’ll respond promptly. A formal disclosure policy and security.txt are forthcoming.
Built by people who secured national systems
Dapple’s founding team includes an NSA cryptomathematician CEO, a CTO with decades in data security for Fortune 500 and government systems, and board expertise from the architect of an ODNI-published open data standard. Meet the team →
See it in action.
Twenty minutes, your environment, your questions answered.