Security, privacy & compliance
No raw photos stored, encrypted embeddings on Indian data centres, liveness on every frame, and a full audit trail.
Face data is sensitive, so Goood Morning is built privacy-first. No raw face images are stored — only an encrypted mathematical embedding, held on Indian data centres, and parents can request deletion at any time.
| Control | Detail |
|---|---|
| Face data | Encrypted embeddings only — no raw photos retained server-side. |
| Anti-spoof | Liveness (blink/depth/micro-movement) on every capture; spoof attempts logged. |
| Data residency | Stored in India; DPDPA-compliant, deletion on request. |
| Certifications | ISO 27001 and SOC 2 Type II. |
| Audit | Every capture and rejection logged with time, gate, and identity. |
| On-prem option | Enterprise GPU edge device keeps processing inside the campus. |












