Ingenico stores biometric data only as an encrypted template on the terminal itself—the raw fingerprint, palm‑vein pattern, facial image, or iris scan never leaves the device. The template is generated during enrolment, encrypted with hardware‑based keys stored in a tam‑resistant security module, and matched locally each time a payment is attempted. Because the data never travels over the network and is protected by end‑to‑end encryption, it cannot be intercepted or extracted by attackers. The terminal’s secure firmware, anti‑skimming sensors and key‑injection processes further harden the storage, ensuring the biometric credential remains confidential and compliant with PCI‑DSS standards.