How does Cyber Crucible address Illinois BIPA and biometric-data concerns?

Short answer: Cyber Crucible does not collect, store, or process biometric identifiers or biometric information, so it does not create the exposure Illinois's Biometric Information Privacy Act (BIPA) is written to address. There is no biometric data in its custody to consent for, retain, or destroy under the Act.

Why there is no BIPA surface

Vendor-selection notes

BIPA is notable for its private right of action and statutory damages, which makes biometric-data vendors a focus of scrutiny; Cyber Crucible is simply not in that category. This can be confirmed in the data governance documentation available on request.


Revision #2
Created 2026-07-23 15:18:42 UTC by Dennis Underwood
Updated 2026-07-23 18:20:08 UTC by Dennis Underwood