Alcatraz AI Completes SOC 2 Audit for Facial Biometric Access Platform

Alcatraz AI has completed a SOC 2 examination covering its facial biometric access control platform, in a move aimed at giving security leaders more assurance about how the company handles biometric and access control data across high-security environments. The audit, conducted by compliance firm A-LIGN, was finalized on November 7, 2025 and is framed by Alcatraz as a validation of its “privacy-first” design choices.

The company’s Rock X device is deployed across data centers, Fortune 100 campuses, financial institutions, stadiums, and government facilities, and is pitched as a way to deliver touchless access while enforcing strong identity assurance at doors and turnstiles. For CISOs responsible for both cyber and physical security, the SOC 2 report is likely to be a prerequisite for broader rollout in regulated environments, especially where biometric templates, video, and access logs are being integrated into security information and event management and incident response workflows.

Alcatraz says its platform uses opt-in enrollment, encrypted biometric templates, and detailed audit reporting to support compliance with frameworks including GDPR, CCPA, CPRA, and Illinois’ Biometric Information Privacy Act. The company positions Facial Authentication as a Service as a way to centralize biometric processing in the cloud while still delivering local access control decisions, an architecture that makes formal attestations like SOC 2 particularly relevant as more organizations converge identity, physical access, and AI infrastructure.

From a governance perspective, the audit does not itself certify biometric accuracy or bias performance, but it does give risk teams independent assurance that Alcatraz’s controls around data handling, security, and availability have been assessed against recognized criteria. For organizations that are trying to expand biometric access while managing regulatory and reputational risk, that combination of cloud-based delivery and audited controls will likely be a key factor in vendor selection.

Sources: GlobeNewswire, Alcatraz AI

—

By the ID Tech Editorial Team