10170412PalmVault: Privacy-First Offline Biometric Authentication and Entitlement PrototypeClosedFast Start ResponseInnovate UKPalmVault is developing a privacy-first access control system designed to go beyond simple identity checks. Legacy access control systems are expensive to maintain, depend on vulnerable central databases, and often revert to PIN codes or keycards when sensors fail, creating security risks and high support costs. PalmVault removes this fragility by eliminating central storage and shared terminals. It embeds cryptographically protected entitlements (e.g. time-limited, role-based, delegated, or quota-based permissions) directly into access tokens, supports secure offline mesh synchronisation to keep devices updated even without internet, and enables online identity authentication and entitlement updates where connectivity is available. Instead of relying on fixed biometric readers, PIN codes, or centralised servers, PalmVault validates identity using biometrics securely enrolled in its own app, with all processing performed locally on the user's device. This approach improves privacy, reduces operational overhead, and delivers resilient access infrastructure suitable for smart residential buildings, healthcare facilities, education labs, corporate offices, and hospitality venues. The feasibility project will deliver a working mobile prototype integrating on-device AI biometric recognition, cryptographic challenge response signing, initial entitlement handling, and an assessment of mesh networking feasibility. Operator feedback sessions across multiple environments will capture usability insights and confirm market demand. The architecture is patent pending for its decentralised architecture and cryptographic entitlement logic. Project outputs will provide validated technical performance, benchmark data, and operator insight to inform a follow-on MVP build and early pilot deployments. PalmVault demonstrates how decentralised, policy-aware, AI-enabled access systems can deliver secure, resilient, and privacy-preserving identity verification while supporting advanced access policies without reliance on cloud infrastructure.