The TrueTap platform
Five coordinated layers - secure credentials, biometric hardware, verification SDKs and APIs, identity platforms, and custom engineering through HSA.dev - sharing one cryptographic core. From luxury product authentication to national identity programmes.
One platform. Every verification context.
Each layer is independently deployable and links to the layer above and below through documented interfaces. National programmes, regulated enterprises and premium brands choose the depth that matches the mandate.
Secure Credentials
Polycarbonate, PVC and composite credentials with secure NFC inlays and security features, provisioned with unique cryptographic identities and bound to the registry at issuance.
Biometric Hardware
Enrolment and authentication devices - fingerprint, iris, face, multimodal terminals, rugged handhelds, kiosks and customized OEM form factors - integrated through established manufacturing partners.
Verification SDKs & APIs
REST APIs and mobile SDKs embed credential tap, biometric capture and verification into citizen-facing, officer-facing and back-office applications - with audit logging by default.
Identity Platforms
National identity, driving licence, workforce and institutional platforms on one architecture - enrolment, deduplication, issuance, authentication, lifecycle governance and analytics.
Custom Engineering through HSA.dev
For programmes with bespoke compliance, topology or integration needs - custom identity platforms, mobile applications, firmware and hardware integration, IAM connectors and sovereign deployment engineering.
Luxury authentication, on the same core.
The same cryptographic core that powers national identity also secures the world's most-valued consumer products. NFC identity embedded at manufacture travels with the product through every ownership cycle - controlled by the brand, verifiable anywhere.
One platform. Every verification context.
TrueTap unifies chip provisioning, identity registration, field verification, and programme analytics into a single managed platform. It is designed to operate at the scale of national programmes and the precision demands of luxury product authentication.
The architecture separates provisioning from verification - allowing the platform to serve high-throughput field agents and consumer mobile verification simultaneously.
Provisioning engine
Secure key generation and chip binding at scale. Each unit receives a unique cryptographic identity.
Verification services
Millisecond challenge-response across connected and constrained network environments.
Programme management
Issuance workflows, revocation, lifecycle governance, and audit log access.
Analytics & reporting
Verification patterns, geographic distribution, and programme health dashboards.
Platform capability matrix
NFC chip provisioning
Volume provisioning of standard and secure NFC chip families with unique encrypted identities. Integration with manufacturing and issuance lines via standard interfaces.
Cryptographic authentication
Challenge?response protocol prevents replay and cloning attacks. Key material never exposed in cleartext during field verification.
REST API & mobile SDK
RESTful verification endpoints and iOS/Android SDKs. Designed for integration with existing enterprise and government backend systems.
Offline verification
Critical verification pathways operate without active connectivity, supporting field enforcement in infrastructure-constrained environments.
Lifecycle management
Issuance, activation, revocation, renewal, and expiry managed through the programme administration interface or via API.
Audit logging
Comprehensive audit logging of every verification and administrative action. Exportable for integration with compliance and oversight systems.
Delivery models
The platform is available in configurations that match your infrastructure posture and programme governance requirements.
Full platform - managed service
TrueTap infrastructure operated by HSA. Suitable for programmes requiring rapid deployment without internal platform engineering capacity.
On-premises / sovereign deployment
Platform components deployed within your infrastructure perimeter. For programmes with data residency, air-gap, or sovereign cloud requirements.
Hybrid architecture
Verification services at the edge, key management and audit in a controlled perimeter. Common for border and enforcement deployments.
SDK integration only
Embed TrueTap verification into applications you already operate. Minimal infrastructure footprint with full cryptographic assurance.
Request a platform briefing
Speak with the TrueTap technical team about platform architecture, deployment timelines, and integration requirements for your programme.