Rights and defence are the same problem, seen from two ends.
Who is allowed to use this likeness, and is the likeness in front of me real — or an AI agent wearing it? Answering any of those well requires the same substrate: enrolled identity, live AI detection, autonomous discovery, and a record that holds up afterwards.
One substrate, four surfaces.
A licence granted in the registry is the reason an agent-filed takedown succeeds. An AI verdict returned in a call is the evidence in a claim. The value compounds because the systems are not separate products bolted together after the fact.
The boring guarantees that decide procurement.
Everything below is table stakes for the buyers we serve, so we treat it as product, not paperwork.
- data residency
- EU (Frankfurt, Dublin), UK (London), US (Virginia, Oregon) — chosen per tenant
- model training
- Customer media is never used to train or fine-tune any AI model, under contract
- retention
- Configurable from zero-retention scoring up to 90 days; evidence records separate from media
- encryption
- TLS 1.3 in transit; AES-256 at rest; per-subject keys for biometric templates
- access control
- SSO via SAML and OIDC, SCIM provisioning, role-based scopes, full admin audit log
- compliance
- SOC 2 Type II in progress; GDPR and UK GDPR aligned; EU AI Act documentation, DPIA and DPA templates available
- biometrics
- Explicit consent capture, subject access and deletion workflows, jurisdiction-aware handling
- availability
- 99.9% API availability target with regional failover and published status
AI verification is a control, not a vibe.
Proveniro is onboarding design partners across banking, insurance and talent representation. Tell us where your exposure sits and we will show you the model verdicts on your own traffic.
soc 2 type ii in progress · eu & uk data residency · no ai training on your data