Identity
infrastructure
by Yashesh Bharti.
Identity without enrolment
Most identity stacks force the verifier to hold something sensitive: a stored face template, a passport scan, a phone number tied to a person. The interesting problem is the opposite: how do you give a relying party a strong, cryptographic answer to "is this a real human, right now", without anyone storing the underlying biometric anywhere?
The answer I keep arriving at is signed proof tokens. The biometric stays on the device. The verifier gets a short-lived, signed assertion that liveness was just measured. The product, not the data, is what travels.
PulseProof
PulseProof by Yashesh Bharti is the production implementation of that thesis. It uses remote photoplethysmography on the device camera to confirm a beating heart in the user's face, evaluates liveness on-device, and emits a signed verification token in under two seconds. SOC 2 Type II, GDPR, HIPAA, ISO 27001, PCI DSS, CCPA, NIST, FedRAMP Ready aligned.
Use cases
- AI agent authorisation: proving a real human consented to an agent's action.
- Financial step-up: wire transfers, account opening, password reset.
- Healthcare and telehealth login under HIPAA constraints.
- Marketplaces and dating: catfish and seller-fraud prevention without device fingerprinting.
- Bot-free platforms: a stronger replacement for CAPTCHA that does not annoy real users.