Versioned policies
Every material journey change becomes a traceable version with a change summary, author, status, and published snapshot.
Govern every trust decision, not just the verification screen.
Version policies, require independent approval, capture consent evidence, measure journey outcomes, and escalate exceptional cases without weakening biometric or device-bound controls.
Transaction approvalPublished v4
- Risk policy evaluatedHigh assurance required
- Identity and livenessEnrolled-face proof accepted
- Operation authorisedBound to transfer reference
Policy owner approvalConsent evidence recorded
Independent approval
Keep the live policy unchanged while a draft is reviewed by a workspace owner or system administrator.
Outcome analytics
Measure completion, retries, failure signals, verification-method performance, risk, and time to completion.
Assisted review
Escalate exhausted or exceptional journeys to a privacy-safe operational queue without overriding a failed proof.
Controlled policy lifecycle
Separate configuration, approval, and runtime execution.
VettiGuard keeps the currently published journey active while a new version is drafted and reviewed. Applications continue using the same stable journey key, so governance does not force frontend rewrites.
Evidence without unnecessary exposure
Operational visibility that respects biometric privacy.
Journey telemetry records policy version, method, result, risk level, consent version, timing, and safe failure categories. It does not place raw camera captures, biometric templates, private secrets, or unmasked subject identifiers into the review interface.
Consent evidenceVersion and timestamp can be bound to the journey session.
Operation bindingPayments and sensitive actions remain tied to an exact backend reference.
Non-override reviewManual recovery decisions remain distinct from biometric verification outcomes.
Privacy-safe auditOpaque references and bounded metadata support investigation without exposing identity material.