Why BioSeal

The advantages that set BioSeal apart

A Visible Digital Seal already proves origin and integrity. BioSeal goes further — binding a biometric to the seal and verifying it anywhere, with no server in the loop.

01
The defining difference

Biometric binding — proof about a person

BioSeal's signature capability is embedding a face portrait or fingerprint template directly inside the seal, cryptographically bound to the holder by the issuer's signature. A verifier can match the seal against the person physically presenting it, turning a proof about a document into a proof about a person. Because the biometric is covered by the same signature as the rest of the payload, swapping or altering it breaks verification.

Backed by id3's own Face and Finger SDKs — the capture and matching technology is built in-house.

02
No network needed

Fully offline, connectionless verification

Everything needed to trust a seal travels inside it. Once a device has cached the scheme's trust lists and manifests, both signature verification and biometric matching run entirely on-device — no live server call at the point of control. That makes BioSeal a fit for border control, remote field inspection, events and any low-connectivity environment.

Signature and biometric are both verified locally.

03
Privacy by design

No central database required

Because the data and biometric live inside the signed seal, verification needs no back-end lookup and no personal-data honeypot to breach or query. This supports privacy, GDPR-friendly deployments and data sovereignty, while removing a single point of failure. Nothing about the holder is stored centrally to be leaked.

The trust travels in the seal — not in a server you have to protect.

04
Cryptographic integrity

Cryptographic authenticity & tamper-evidence

Every seal is signed with the issuer's private key using ECDSA, so its origin can be proven, not merely claimed. Any change to the payload — even a single altered field — breaks the signature, giving instant, verifiable tamper detection. Security rests on the issuer keeping its private key secret and on sound trust-list governance.

Data authenticity and data integrity in one check.

05
Open by design

Standards-based & interoperable

BioSeal implements the ISO/IEC 22376:2023 Visible Digital Seal standard within the ISO 22385:2023 trust framework, using ECDSA signatures and ETSI-aligned trust lists. Any compliant reader with access to the scheme's trust list can parse and verify a seal, so issuers and verifiers interoperate without proprietary lock-in.

id3 Technologies contributed to the VDS standardization effort.

06
One engine, any scheme

Scheme-agnostic solution layer

The same BioSeal API, SDK and CLI can issue biometric identity credentials under the Otentik Trust Network for one customer and product-authentication seals under a different VDSIC-accredited scheme for another — with no change to the sealing engine. Only the trust material and manifests differ. BioSeal is the solution layer; it never pretends to own the trust root.

Deploy under Otentik or any accredited VDS scheme.

07
Physical meets digital

Works on paper and on screen

A seal can be printed on a card, certificate or product tag, embedded in a PDF, image or wallet pass, or carried on an RFID/NFC tag. Because it is self-contained, the seal travels with the item across the physical–digital divide — giving a paper diploma or a printed shipping label the same cryptographic weight as a digital record.

QR Code, Data Matrix, and NFC carriers.

08
Small yet complete

Compact yet complete

MessagePack payload encoding and ECDSA's short signatures keep the seal small enough to print or display on screen, while the header carries only compact references — to the manifest and certificate — instead of embedding them. The code stays reliably scannable without sacrificing full verifiability.

Compact enough to print; complete enough to fully verify.

Seal trust into everything you issue

Talk to our team about issuing biometric, tamper-evident Visible Digital Seals — verifiable anywhere, even offline.