
A frictionless participant experience for real-time biometric health results.
The seamless journey from arrival to results
Scan Session API, data validation, and partner callbacks work seamlessly in the background
When a partner invites a participant to complete a Face Scan, the participant's basic profile information is securely passed from the partner's system to HiQOR through a private API connection.
All information is encrypted in transit and used only to generate the scan and personalized health insights.
API Endpoint:
POST /api/v1/scan-sessions{
"externalParticipantId": "pxyz_00291831",
"firstName": "Sarah",
"lastName": "Johnson",
"email": "sarah.johnson@example.com",
"mobile": "+12065550198",
"sex": "female",
"age": 42,
"weight": 145,
"height": "5'6\"",
"hypertension": "no",
"consent": true
}HiQOR validates participant identity and generates a unique UUID if needed, returning a secure redirect URL for instant face scan access.
{
"sessionId": "sess_9x817f03",
"uuid": "9c55069b-b7fc-4fe4-be61-796e569a83bb",
"redirectUrl": "https://www.scanyourface.co/start/partnerxyz?token=<singleUseToken>"
}Partners can control how many Face Scans a participant can take — single-use, monthly quotas, or unlimited access.
Participant Check & UUID Generation
HIPAA-Aligned
End-to-End Encrypted
Scan Limit Controls
Results delivered to participant via web interface + email within 60 seconds.
Face Scan results are securely delivered to partner's endpoint via encrypted HTTPS POST request.
Enterprise-grade security infrastructure protecting sensitive health data at every step.
Dedicated isolated AWS VPC with multi-layer security controls and network segmentation.
AES-256 encryption for PII and PHI at rest and in transit, with automated key rotation.
TLS 1.2+ transmission protocols with signed Business Associate Agreement (BAA) coverage.