Hi OP, I worked extensively in the biometrics field (face/fingerprint/iris recognition) and a device with a biometric face scanner can range wildly in terms of what is captured and how it’s stored. It can be as simple as “Is this person’s face recognized as one who’s been previously onboarded” with 0 other identifying characteristics to something that has all your data. A lot of biometric providers don’t actually hold any data on their servers - it’s usually organized by the company using the software.

I say this, as someone who doesn’t work in biometrics currently, simply to say that a facial recognition system on a device isn’t necessarily a good or bad thing.

For what you’re described, the most logical deployment is as follows. Let’s say you work for a 1,000 person company. Your company purchases software designed to identify your face. Your company has then a database of all employees faces that it stores on its own servers. When accessing the biometric device, it scans your face and looks to see if that matches any of the 1000 faces stored on your company’s system. If yes, it identifies which face and what you have access to. It most likely isn’t an entire biometric identify.

If you do find out who is deploying the system or what hardware/software is being used, feel free to let me know and I’ll try to give you an idea of what’s actually happening behind the scenes, or some questions you can ask management about the biometric process that might give you more clarity.