Liveness is not identity
A person satisfying a capture challenge has not necessarily been identified as an enrolled worker. Liveness and face matching answer different questions. A system can perform one without the other, and a buyer should not interpret a “selfie verified” label as both.
Attendify uses a blink liveness interaction in the personal-device capture flow. Optional face matching is separately controlled. The current implementation is not advertised as certified presentation-attack detection.
Active and passive approaches need evaluation
Active approaches ask for an interaction, such as a movement. Passive approaches examine capture signals without an explicit challenge. Their effectiveness depends on the implementation, attack type and testing; a generic table claiming that one method defeats every photo or video is misleading.
NIST’s authentication guidance distinguishes presentation-attack concerns from injected inputs and treats liveness as part of the broader detection picture. Its federal authentication scope is not a universal rule for workforce attendance.
A server decision can still depend on client inputs
An application may send a liveness result or candidate representation to a server. Server-side acceptance logic does not by itself establish that those inputs came from a trusted camera path. Ask which parts are trusted and what a modified client could submit.
Attendify’s server rejects a submitted failed liveness result and applies its other requirements. Face inference runs on the device. The security page explains that boundary without claiming spoof-proof verification.
Test the usable workflow
Scroll the table sideways to read all columns.
| Question | Evidence to request |
|---|---|
| What is the challenge? | The actual worker interaction on supported devices |
| Which attacks were evaluated? | Named test conditions, method and limitations |
| What happens after failure? | Worker message, retry and supervisor review path |
| Does identity matching run too? | Explicit rollout status and reference comparison |
| Can the worker complete it in site conditions? | Representative lighting, eyewear and device tests |
Do not assume a good-lighting demonstration covers every site condition. Also consider people who cannot perform the normal interaction and how genuine work will be recorded.
Choose evidence proportionate to the use
A liveness interaction can be one part of attendance evidence alongside authorization, event location and review. It does not calculate hours or determine wages. Keep the capture result separate from the human decision needed when a worker’s record is incomplete.
Continue with GPS versus biometric evidence or mobile attendance.