Auror Subject Recognition
Auror Subject Recognition provides retailers with the data governance tools to responsibly and effectively manage live facial recognition technology (FRT) for the purpose of crime prevention, safety and loss prevention in their stores.
We believe that retailers have the right to keep their staff, customers and stores safe, and technology can play a significant role in achieving safer stores and safer communities.
Violence and serious offending in retail settings
Live facial recognition is a proportionate and necessary tool to confront the reality of escalating violence and loss in retail settings.
Retail crime events are violent, abusive or involve weapons
of retail crime is caused by 10% of offenders
more likely a repeat offender will be violent or aggressive
Retail crime is becoming more brazen, organised and violent, and retailers are seeking new technology-based solutions to keep their frontline workers, customers, and communities safe.
Using Auror, retailers already record crime, violence and loss across their store networks. That data is consistently telling them that the rate of violence, harm and stock loss is driven by repeat and organised offenders.
Retailer data also highlights that repeat and aggressive offenders are not brand or store-loyal, and they do not respect jurisdictional boundaries. Serious offenders are often stealing to order, operating across large geographic areas.

North america
United Kingdom
Australia
new zealand
% of repeat offenders who move between retail sites are violent.
Heat map of repeat, violent offenders based on crime information recorded by retailers in Auror.
Auror’s responsible solution to FRT in retail
Subject Recognition is an add-on module that can integrate with the world’s leading and most accurate live FRT systems. Subject Recognition operates on top of Auror’s core platform and is strengthened through Auror’s data governance and safeguards, which prohibits collection of potential bias tags such as race, ethnicity, or religious affiliation, instantly discards honest shopper data, and keeps a human in the loop at every key decision.
The restriction for potential bias tags means the system can't be exploited for profiling or categorization of demographics. Auror will never support that, and won’t work with anyone that does.
Subject Recognition has been designed as a human-centric tool that provides trained personnel with the context to support informed, proportionate decision-making and to measure outcomes.
How it works
Incident
reporting
Persons-of-Interest (POI) watchlist
- Extreme Risk - i.e weapon used in the last 12 months.
- High Risk - i.e physically abusive in the last 12 months.
- High Loss - i.e prolific theft in the last 12 months.
Detection
& alerts
Response
& outcome
Benefits of Auror Subject Recognition
Risks of standalone systems
End-to-end
ASR is deliberately an end-to-end solution that supports retailer configurability. From helping retailers to manage their own information about crime in their stores, to seamlessly integrating those profiles of the highest harm offenders into FRT watchlists to generate alerts. No information leaves the Subject Recognition system and it's not mixed with other retailers' data. Everything is tracked and access controlled to support SOCs, centralised or in-store teams through a single user interface.
Standalone providers require image banks to feed watchlists and a separate interface and alerting system. This means a retailer must double handle its information, duplicate lists, potentially losing control of where their data ends up. This fragmentation is labor intensive, requiring more headcount to manage lists, reducing the productivity gains promised by FRT.
FRT purpose
ASR is a loss prevention, team safety and security tool. It cannot be used for monitoring, tracking, profiling, demographic categorisation or marketing purposes. Enrollment in watchlists is set and managed by the retailer.
Without the right data governance workflows in place, any shoppers' information can be retained and potentially used for non-crime prevention purposes such as marketing, racial profiling or targeting.
Sensitive characteristics
Prohibits the collection of sensitive information (i.e race, ethnicity, religious or political affiliation) removing potential bias tags within the core information foundation the FRT operates on. This includes the ability to restrict profiles at a system level (i.e marketing, minors). A special consideration for minors' data is a general safeguard required by most privacy regulators. The choice is the retailers to make based on the severity of the crime.
Some providers may not prohibit the collection of sensitive information or data unrelated to crime and have no ability to restrict profiles related to minors. This can potentially proliferate bias by the FRT system, or be used for purposes beyond just crime prevention (i.e marketing, profiling).
Human review and support
No automated decision-making. A human is always in the loop on key decisions from documenting a crime event, to POI list criteria, review and enrollments, to suggested Subject Recognition matches and alerts. Tools to configure thresholds to ensure only highest harm offenders are enrolled. Supports context-driven decision-making for retail teams — rather than just matching a face.
Automated decision-making with limited human review. Face matching can occur with limited or no information about previous offending, leaving store teams unsure of the specific threat or how to respond. This exacerbates potential for misguided or inappropriate interventions.
Auditability, configurability & access
Full audit trail of every enrollment, decision, alert, verification action, and outcome. Access controls for specific authorised staff. Configurability to suit retailer needs such as confidence thresholds, POI list criteria, processing on-camera or in-store server based on preference, and lists at store, regional or organizational levels.
Automatic enrollments, by FRT provider, not the retailer. No auditability to search activity linked to watchlist management and outcomes. Fixed cloud processing and storage of biometric information.
Data retention
Biometric data is never stored in the cloud. Biometric data for non-matches is discarded immediately and never stored, protecting the privacy of everyday shoppers.
Systems may be configured to store biometric data in the cloud, owned and managed by the FRT provider. Data is held by FRT provider for non-matches.
Data ownership & sharing
Retailers own and maintain full control of their information; Auror does not solely own or control retailer data. This is important as Auror does not sell retailer data to third parties or mix Person of Interest (POI) lists from different retailers. Retailers maintain the relationship with those whose data they collect for this purpose. POI lists are generated using a retailer's existing information about serious offending. Retailers cannot manually or arbitrarily enroll any profile to the POI list.
As the collector of the information, a retailer can never opt-out of data controllership. This means the retailer always remains responsible for where that data ends up and how it is used. That can be challenging where a standalone provider is mixing or combining retailer data to form centralised, master watchlists. This means providers are sharing data across retailers, selling from one customer to another, even nationwide, and the retailer loses effective control of their own data. This poses a variety of risks to not only retailers but also individuals as the impact of an error is far greater. As the owner of the data, the standalone provider may manage the watchlists and verify alerts and incidents themselves, rather than the retailer - where the retailer remains responsible but has no effective control.
Law enforcement
No law enforcement access to Subject Recognition. Police instead can be alerted to a retailer to a crime that has occurred through Auror's Direct to Police reporting functionality or via emergency lines. This requires a person to actively make the report, rather than relying on automated decision-making.
Risk of providers sharing watchlists with other retailers or businesses, pushing automated alerts to other to parties, including law enforcement.
FRT providers
Auror only partners with leading FRT providers that demonstrate world-class performance and reliability, are trained on diverse datasets, and are validated through independent testing, such as the US National Institute of Standards and Technology (NIST).
Auror also undertakes its own extensive testing of providers against strict technical accuracy, anti-bias, reliability, privacy and security measures, in line with our own Responsible Tech and AI process. Auror can provide retailers with a solution with an existing partner or can integrate with a live FRT provider of a retailer's choice, provided they meet these high standards.

Information security
Subject Recognition supports retailers’ compliance with local privacy requirements and keeps their information safe and secure. Auror’s privacy policy is available here and we make this available for retailers to include in their own compliance statements and notifications.
All information in Auror is end-to-end encrypted, in transit and rest, and stored in local data centers, which are ISO-certified. Auror is also SOC 2 Type 2 compliant. Our system regularly undergoes cybersecurity penetration testing.
Frequently Asked Questions
Frequently asked questions
The FRT providers we integrate with are responsible for developing, maintaining and improving their technology. Retailer data is not used to train any algorithm and any information stored in Auror is never used to train FRT models.
Auror provides retailers the tools to determine how they manage information relating to minors. Many jurisdictions and retailers’ own operating policies require information about minors to be treated sensitively. The unfortunate reality for frontline retail workers dealing with risk every day is that a minor with a weapon can be just as threatening as an adult with a weapon. Retailers can choose to be alerted for specific levels of risk related to minors or exclude minors from biometric processing altogether. Retailers can control their own response based on what is proportionate for their unique environment and risk setting.
Leading FRT is incredibly accurate and we only work with providers that are independently benchmarked and deliver world-class results validated by accredited bodies, such as the US NIST.
Accuracy of FRT is only part of the equation when it comes to bias and misidentification. Unlike other systems, Auror prohibits the specific collection of sensitive information such as ethnicity, race, political or religious affiliation or sexual orientation. Therefore, Subject Recognition cannot be used to categorize people into groups based on these demographics, and prevents profiling and targeted advertising based on these groups. It cannot be used for loyalty programs or other tracking purposes.
The FRT relies on a number of factors including the reference image quality and the setting of confidence thresholds. While retailers choose these thresholds and are responsible for the reference images they upload, Auror sets minimum thresholds to guide effective and responsible use. Retailers can configure these levels to balance the rate of false positives and false negatives, to both protect their store teams and reduce misidentification.
Ultimately, FRT is a tool that supports human decision-making, and should not be used to make automated decisions for the retailer. Subject Recognition is designed to have trained individuals involved at each key decision-making stage and provide crucial real-time context to support their response when a potential threat enters the store.
No record of any individuals who are not on the POI list is ever retained. For good, honest shoppers, their temporary biometric template is instantly discarded and never stored. Where there is a match, the detection image is sent to Auror to generate an alert, alongside the reference image (a still photo), for a trained retail employee to review. No biometric data (match or non-match) is stored in the cloud.
In all cases, retailers determine the length of data retention with system-defined limits to ensure data is never kept for longer than necessary.
Retailers authorize a limited number of specific roles in their organization to have access to the Subject Recognition. Typically retailers restrict access to a smaller, trained group within their organization to review the POI list, and accept or decline suggested enrollments.
No. Subject Recognition has been configured in such a way to allow a retailer to keep their own information private to themselves. A retailer can configure their POI list by store, region, or organization-wide rather than a ‘master’ list controlled by a third party. Through an end-to-end workflow, the system allows retailers to benefit from information about past offending across their store networks, while enhancing data minimization, reducing data duplication by individual stores.
No. Subject Recognition can only be used for crime prevention and safety purposes. It has no capability to build general shopper profiles, analyze purchasing behavior, track, categorize, or target for marketing purposes.
Retailers own and manage their own information. Subject Recognition has been configured in such a way to allow a retailer to keep their own information private. Auror does not on-sell data to third parties or use data for its own purposes.
Retailers use Auror’s core software platform to document crimes and in-store events after they happen at their sites. Profiles linked to events that meet the retailer’s criteria for serious and high harm offending are suggested by the Subject Recognition module for enrollment to that retailer’s own POI list.
An authorized, trained retailer employee can review these suggestions based on their own internal policies. Retailers cannot arbitrarily enroll anyone to the POI list (i.e. taking images from online) and the post-enrollment auditing functionality allows retailers to ensure quality control of their list.
If a retailer changes any information that means a profile no longer meets the criteria for enrollment, then that profile automatically falls off the list.
Subject Recognition is deliberately built as a retailer tool. It exists to help retailers identify high risk, serious offenders that have previously offended in their stores, and support the decision-making of their frontline teams according to risk. It doesn't automatically alert police, and police don't have access to it.
There are a few reasons for that. Retail crime is extremely high volume and automatically alerting police to matches, in addition to the crime reports they already receive, would overwhelm agencies with notifications they might not be able to act on, and could risk giving retailers a false sense of security that a report to police has been made. We believe the right response is for the retailer to assess the situation and decide, based on risk, whether police involvement is needed and proportionate to the risk.
We work with law enforcement agencies around the world, and we know any FRT used in a policing context needs to be owned, governed, and independently verified by police themselves - not via a retailer or third-party’s system.
Depending on the jurisdiction, retailers are required to and are responsible for clearly communicating their use of FRT through appropriate signage. Auror encourages retailers to use signage that links to privacy policies for both the retailer and Auror. This provides customers with the opportunity to choose whether they want to enter the store, go to a different store, or use an alternative method such as online shopping. The purpose of Subject Recognition is to give frontline retail workers early notification of individuals previously involved in serious or high harm offending in their stores.
Concerns around FRT are typically based on its potential use for profiling, tracking, behavioral monitoring, marketing purposes, loyalty programs, or scraping images from open sources. Retailers cannot in any way use Subject Recognition for those purposes.
Unlike many other solutions, retailers own and manage their information and this is not shared with other retailers or law enforcement. Auror prohibits the specific collection of sensitive information such as ethnicity, race, political or religious affiliation or sexual orientation. To be enrolled to the POI list, an individual must already have previously offended at a retailer’s store and meet the retailer’s criteria for serious, high harm or high loss offending.
Built-in integrity tools provide retailers with full auditability. A human is always in the loop on key decisions and no action is automated. Biometric processing takes place in-store and not in the cloud. If there is no match, that biometric data is discarded immediately.
Retailers using this technology will have signage in place upon entry as notice of their use of FRT, generally linking to their own privacy policy.
On entry the FRT detects a face and creates a temporary biometric template which is cross-checked instantly against a POI list of individuals that have been involved in serious offending.
This happens instantly on the camera itself or an in-store server. If there is no match, that biometric data is discarded immediately and never stored.
If the system suggests a match, an alert is sent via Auror’s cloud to an authorized, trained retail employee with the ability to view context about the POI’s previously recorded serious offending. If they reject the suggested match, the biometric data and detection image is discarded.
If the match is confirmed, the employee can decide what the best response is, according to that retailer’s training and internal policies. They are supported by information from previous offending within Auror (i.e. the individual is known to carry a weapon). The response can be as simple as engaging politely at the store entrance, not approaching or calling police. Any outcome and follow up is also captured, so a retailer can see the effectiveness of their system.
Retail crime is becoming more brazen, organized and violent, and the obligation for retailers to keep their frontline workers safe has become clear. FRT capability and accuracy has significantly improved in recent years, and will be a key tool in reducing violence in stores alongside other recognition technology like license plate recognition (LPR).
While Auror does not build or own FRT algorithms, it applies the secure data governance layer, end-to-end workflows, and safeguards to ensure it is used effectively and responsibly for specific purposes. This keeps retailers safe from non-compliance, protects honest shoppers from privacy breaches, while holding high harm offenders accountable.
FRT is already used in everyday environments such as airports, hotels and casinos, stadiums and in some retail settings. It offers retailers the fastest and most accurate way to identify high-harm POIs and respond according to risk.







