# Compliance Integration Guide

Based on the business capabilities of face authentication scenarios, FinAuth defines optional personal information collection and the corresponding permission control switches. You can apply the following optional configurations according to your own business needs. The SDK does not force the acquisition of optional permissions; when you do not need a particular optional SDK capability, you can disable it through configuration. Once disabled, the SDK will no longer collect the corresponding personal information / permission, and this does not affect the use of the main business flow.

# 1. FinAuth Face SDK Optional Permission List

SDK Name	Main Function & Purpose	Functional Scenario (When Requested)	Required Permission	Type of Personal Information Collected	Optional	Configuration Method
FinAuth_SDK (Android)	Corrects the user's posture during SDK face recognition to improve capture quality	When launching the face SDK for face recognition	Device parameters and system information	Device information, gravity sensor information	Optional	Configured via parameters passed to the SDK initialization interface
Used for device risk detection and other SDK security safeguards	When launching the face SDK for device risk assessment	Application information	Application information, including installed abnormal apps, abnormal files, abnormal system processes	Optional	Controlled by scene ID
When launching the face SDK for device risk assessment	Device parameters and system information	Device information, gyroscope sensor information, number of sensors, presence of Bluetooth/flashlight, VPN, charging status, etc.	Optional	Controlled by scene ID
Completes parsing of physical documents	When launching the eID SDK for document recognition	NFC permission	Encrypted text in the document chip (such as name, ID number, etc.) and face photo information	Optional	Controlled by the integrated SDK product type
Ensures that SDK functions such as face recognition and liveness detection are performed securely and that evidence is retained	When launching the face SDK and requiring screen recording for evidence retention	Screen recording permission, audio recording permission, etc.	Screen recording video of the content displayed during liveness detection, system prompt sounds & ambient sounds	Optional	Controlled by scene ID
FinAuth_SDK (iOS)	Corrects the user's posture during SDK face recognition to improve capture quality	When launching the face SDK for face recognition	Device parameters and system information	Device information, gravity sensor information	Optional	Configured via parameters passed to the SDK initialization interface
Used for device risk detection and other SDK security safeguards	When launching the face SDK for device risk assessment	Application information	Application information, including installed abnormal apps and installed abnormal plugins	Optional	Controlled by scene ID
When launching the face SDK for device risk assessment	Device parameters and system information	Device information, gyroscope sensor information, number of sensors, battery status, vendor identifier IDFV, VPN and proxy information	Optional	Controlled by scene ID
Completes parsing of physical documents	When launching the eID SDK for document recognition	NFC permission	Encrypted text in the document chip (such as name, ID number, etc.) and face photo information	Optional	Controlled by the integrated SDK product type
FinAuth_SDK (HarmonyOS)	Corrects the user's posture during SDK face recognition to improve capture quality	When launching the face SDK for face recognition	Device parameters and system information	Device information, gravity sensor information	Optional	Configured via parameters passed to the SDK initialization interface
Used for device risk detection and other SDK security safeguards	When launching the face SDK for device risk assessment	Application information	Application information, installed abnormal apps, installed abnormal plugins	Optional	Controlled by scene ID
When launching the face SDK for device risk assessment	Device parameters and system information	Device information, gyroscope sensor information	Optional	Controlled by scene ID
Ensures that SDK functions such as face recognition and liveness detection are performed securely and that evidence is retained	When launching the face SDK and requiring screen recording for evidence retention	Screen recording permission, audio recording permission, etc.	Screen recording video of the content displayed during liveness detection and system prompt sounds & ambient sounds during verification	Optional	Controlled by scene ID

For more regulations related to SDK personal information collection, see: FinAuth Personal Information and Privacy Protection Policy.

# 2. Detailed Configuration Instructions

# 2.1 Functional Configuration Instructions

[Device Risk Detection] is configured as follows, identical across iOS, Android, and HarmonyOS (configuration path: log in to the console — App Configuration — Add Scene).
[Screen Recording Evidence Retention] is configured as follows (configuration path: log in to the console — App Configuration — Add Scene).

After configuring in the console, it must also be enabled via the following SDK configuration:

HarmonyOS: You need to configure the request permissions ohos.permission.ACCELEROMETER and ohos.permission.GYROSCOPE in the entry's module.json5.
iOS: No additional configuration is required.
Android: You need to declare the audio recording permission in the app's manifest file. In addition, if the app's targetVersion is set to 35 or above, you need to add the foreground service permission in the app's manifest file. This is a requirement of the Android system; otherwise the function cannot be enabled properly.
[User Posture Detection] is configured via parameters passed to the SDK initialization interface:
Android: Configure the verticalDetection field of the FaceLiveDetectConfig detection configuration class interface during initialization.
iOS: Configure the phoneVertical field of the FinAuthLiveV5DetectInitConfigItem configuration class interface during initialization.
HarmonyOS: Configure the verticalDetection field of the FaceLiveDetectConfig configuration class interface during initialization.

# 2.2 eID Parsing NFC Related Permission Configuration Instructions

The NFC recognition function is part of the eID identity verification product and is not provided by default. If required, please purchase and activate it, then download the eID identity verification SDK from Console — SDK Download and integrate it for use. The default Enhanced/Premium SDK does not include NFC functionality and will not request NFC-related permissions.

# 2.3 Other Optional Personal Information Not Collected by the SDK

Type of Personal Information Collected	Main Function & Purpose	Functional Scenario (When Requested)	Optional	Configuration Method
ID number, name	Required when the face identity verification method is selected, used for comparison against authoritative databases	Passed in when the face identity verification method is selected during verify interface authentication	Optional	Passed as a parameter when the corresponding verification method is selected

For more compliance guidance, see: Yuanli Jinzhi SDK/API Compliance and Security Guide.