Built here, operated here
Three products, one suite: the platform, the identification layer and the workplace credential.
iTraze One platform orchestrates terminals from seven manufacturers, every kind of credential and your HR systems — on our multi-tenant cloud or on your own infrastructure.
- Multi-tenant and hardware-agnostic: terminals from seven manufacturers writing to a single ledger.
- Multi-tenant cloud with per-tenant isolation, or single-tenant on-premises on your infrastructure.
- gRPC and REST API documented with OpenAPI — integration is a contract, not a project.
- Payroll, scheduling and ERP integration: SAP, aTurnos, Hiberus KVP and migration from legacy systems.
- Designed for working-time registration and GDPR audit requirements.
On the roadmap: corporate identity with standard OIDC (SSO).
idManager
- iCapture · local devices
- iGateway · network terminals
The identification layer that runs on the client's premises: fingerprint extraction, matching and template storage in ISO 19794-2 and ANSI 378 standards — templates, never fingerprint images.
- Fingerprint extraction and matching with scanners from seven manufacturers, in ISO 19794-2 and ANSI 378 standards with NFIQ quality.
- On-premises deployment: biometric processing runs on the client's premises, with GDPR Article 9 safeguards.
- Write-and-match credentials, never read back: the template is written to the terminal and cannot be retrieved.
- Unified management of network terminals and local devices: iGateway and iCapture behind one OpenAPI-documented API.
- End-to-end TLS with automatic ACME certificates, audit logging and rate limiting.
iTap In development
Your workforce's physical credential, brought to the workstation: one tap on the reader signs the browser session in.
- Browser extension with corporate rollout (MSI and GPO).
- The same card that opens the door signs the workstation in.
- Interface in English, Spanish and Catalan.
In development — part of the suite's identity roadmap.
Secure development principles
Security is part of the development cycle, not a layer added afterwards. These are the principles behind everything we build:
- Compiled languages and clean production code, no test routines left in.
- Exhaustive verification of all input data.
- Development technologies and tooling kept permanently up to date.
- Rigorous validation of every system access.
- Encrypted communications for sensitive information.
- Minimalist functional design — every feature answers a requirement.
- Minimal storage of sensitive information on mobile devices.
- Exhaustive documentation of every change.
- Special attention to the most vulnerable points of the system.
- Concise functions with a single responsibility.
- Defined standards for names and structures.
- Test-driven development (TDD).