Clavira

Every biometric scan gets a receipt.

When a regulator, an employee, or a court asks what happened, you have something to hand over. Each scan becomes one record with consent, purpose, and timestamp.

See how it works

Biometric Receipt
R-2026-04-3019-7

You were scanned.

Pioneer Air · Gate camera 3O'Hare Terminal 1Deletion scheduled May 14, 2026A face cannot be reissued.
See what I would produce

Scroll to unfold the record

The full record

Identity

Subject
subject:8f21…c44e
Operator
Pioneer Air · O'Hare Terminal 1
Device
Gate camera 3 · attested 2026-04-30T07:00:00-05:00

Accountability. The receipt names the operator who ran the scan and the place it happened. Responsibility has an address.

Event

Captured at
2026-04-30T07:07:12-05:00
Modality
Face
Purpose
Boarding pass verification
Jurisdiction
Illinois, US

Time. Timestamped to the second, so the order of events can be shown.

Consent

Consent verified
Yes · 2026-04-30T07:06:58-05:00
Consent scope
Boarding pass verification at this gate, this trip
Disclosure to subject
Yes · receipt issued 07:07:13

Notice. Notice is issued before the camera fires, and the receipt shows the order.

Integrity

Hash
sha256:0x4a2c…e91b
Anchored to
Polygon PoS · block 67,224,981
Anchored at
2026-04-30T07:07:19-05:00

Independence. Anyone holding the receipt can check it against the record themselves.

Lifecycle

Retention
Deletion scheduled 2026-05-14 · BIPA §15(a)

Jurisdiction. Each record carries the law it was captured under, so an audit reads in the regulator’s own language.

Record

Standard
BES-1 Capture Record · v1.0
Verify
clavira.com/verify/R-2026-04-3019-7
Use
Contemporaneous to the captured event. Intended for evidentiary use under FRE 901 and state equivalents.

The standard. Receipts are written to the BES-1 schema and produce foundation-ready evidence under FRE 901(b)(9) and state evidentiary equivalents.

For the person scanned

You were scanned. Receipt R-2026-04-3019-7 · Pioneer Air · Apr 30, 2026. Verify at clavira.com/verify/R-2026-04-3019-7.

Made to hand over. Part of every record is written for the person who was scanned. What happened, when, and where to check it. It comes away from the rest, and the rest stays with the operator.

Coverage

Built for the laws you actually face.

Four statutes, four kinds of evidence the receipt produces.

The architecture is built for the next ones: Massachusetts, Missouri, Minnesota, Nebraska, New York, Pennsylvania.

Comprehensive state privacy laws with biometric provisions (CA, CT, VA, OR, DE, MD, MN, and others) share the same evidentiary pipeline. Current as of June 2026.

BIPA
740 ILCS 14/15(a)(b)
Consent + retention evidence
CUBI
Tex. Bus. & Com. Code §503.001(b)
Notice + consent evidence
Biometric Identifiers Act
RCW 19.375.020
Pre-enrollment authorization
Privacy Act
§6-1-1314 (per HB 24-1130)
Purpose-at-capture + retention

Evidence from the record

What the courts have decided.

Three numbers from the public record. Why biometric evidence is now a board-level exposure rather than a paperwork problem.

White Castle put its own potential liability near $17 billion, from a fingerprint clock-in its employees had to use to get paid. Illinois capped that math in 2024 and the Seventh Circuit applied the cap to older cases in 2026. Numbers like that force change, and the records you have to produce outlast every version of the law.

Meta settled with Texas under CUBI for $1.4 billion in July 2024. It is the largest privacy settlement ever paid by one company to a single U.S. state.

Figures cited from public court records and statute. Not legal advice.

$17B
What one fingerprint time clock put at risk
$1.4B
Largest single-state biometric settlement
9
States with dedicated biometric statutes

Every biometric scan gets a receipt.

Have something to hand over. Join the early-access list and we'll share the BES-1 spec, the integration path, and how the receipt fits the stack you already run.

We email about Clavira's product and compliance updates. Unsubscribe any time.

Your information is secured with financial-grade encryption and never shared with third parties.