Never store a face
Patent-pending tech keeps biometrics as a privacy-preserving descriptor, never a photograph, so there is nothing to leak from a classic image store.
GDPR CompliantPrivacy by default & by designISO/IEC 27001: softstackBuilt by softstack Labs
Product
Biometric identity without a biometric honeypot
Most facial systems store a template you have to trust them to protect. BioHash™ is softstack's API-first platform for liveness-checked verification and matching : integrate it into gates, apps, and workflows so no single server ever holds a usable biometric.
Military-grade encryption
Templates are sealed with AES-256-GCM before they touch disk, then matched as encrypted shares across the network.
Split so nothing is whole
Matching runs on distributed shares. A single compromised node learns nothing usable about the person.
Two-layer liveness
Active challenges plus passive anti-spoofing defeat photos, masks, and replay attacks at the gate.
How it works
Three steps. Under two seconds.
From camera to decision, the flow is designed so a usable biometric never sits in one place.
- 01Capture
The camera captures a face and computes a mathematical descriptor on device-grade models. The raw image is discarded; only the math moves forward.
- 02Liveness
Active challenges (blink, head turn, gaze) run with passive presentation-attack detection to prove a live human is present, not a photo, replay, or deepfake.
- 03Distributed match
The encrypted template is additively split and matched across a distributed network. Only a match verdict returns, never a usable biometric.
Use cases
One identity primitive. Many front doors.
Wherever you need to know a real person is really present, BioHash™ drops in behind a single API.
Stadium & arena entry
Ticketless, face-based admission at turnstile speed.
Proof of Human
Prove a real, live person is behind an account, not a bot farm or AI agent.
Payments & POS
Confirm high-value transactions with a glance, not a PIN.
2FA / step-up
Add a biometric factor to any login without shipping hardware keys.
Crypto wallet recovery
Recover with your face plus a physical object you own, with no seed phrase to lose.
Age verification & KYC
Bind onboarding to a live person, not a stolen document scan.
Developers
An API built for identity engineers
One API key and a few lines of code put verification in a gate, an app, or a checkout : with no biometric infrastructure to run yourself. REST API available now; the @softstack/biohash TypeScript SDK ships alongside it.
- Request access for your use case and volume
- Receive a project API key
- Call the EU-resident gateway: rate-limited by default
curl -X POST https://api.biohash.io/v1/liveness/verify \
-H "X-API-Key: $BIOHASH_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"session": "sess_9f2c",
"challenges": ["blink", "turn_left"],
"frames": "<base64 frames>"
}'softstack Labs
Born in Flensburg. Shipping as a product.
BioHash™ grew out of Project BEKI: a research and development initiative co-financed by the European Union, the Federal Government, and the State of Schleswig-Holstein (GRW). Today it is a production identity platform operated by softstack, with product, docs, and API access live at biohash.io.
Need enterprise deployment, on-premise matching, or help integrating BioHash into your stack? softstack's Web3 security and development teams can scope it with you.