Symisc Systems (our parent company) is working with security partners on SOC 2 reporting and full ISO 27001 certification. You can deploy on-premises (https://faceio.net/on-premise) or use AWS Rekognition as your default facial recognition engine (https://faceio.net/facialid#facial-recognition-engine) for complete control over facial hashes.