Image: Kentucky Kernel
A student at Woodland Glen IV can look at a wall camera and the door opens. The University of Kentucky is running Alcatraz AI’s Rock system there, at Kirwan-Blanding Hall, and in research spaces that already require two-factor access. UK Police calls it a biometric pilot. Alcatraz calls the output a Facial Signature: a temporary scan turned into an encrypted template, with the raw photo deleted after enrollment, matched on the device, and tied to a badge number rather than a name. CEO Tina D’Agostin told local reporters, “You’re zeros and ones to us once you’ve been scanned.” That is a vendor description. It is not an independent audit of what the university keeps.
What the Vendor Says the Door Does
Rock is sold as authentication, not a crowd search. Alcatraz senior vice president Greg Sarrail has described it as a closed loop: the template can be compared only inside the company’s system, not run against a government database. The company says it does not store photos or videos of faces and does not hold a cloud biometric database. D’Agostin has said Alcatraz does not have student names and cannot sell the data. Matching is supposed to happen locally. The system also claims to flag tailgating, so one scan does not admit two people.
None of that has been tested in public on the UK install. No error rate, no false-reject count, and no independent review of the two-week housing trial have been released. A card that fails can be reissued. A template built from a face cannot.
Optional in the Dorm, Not in the Lab
Documents the Herald-Leader obtained under open records say the housing pilot “adds a strictly optional, hands-free access into building entrances and does not replace Wildcard ID or mobile ID access.” UK’s police page tells residents who are not recognized to use a Wildcard or mobile ID. That fallback is the only thing keeping “optional” from being a slogan.
An August 28 email to employees in the Division of Laboratory Animal Resources, one of the sites getting Rock hardware, said enrollment is not optional in that area. Housing residents can decline. Some lab staff cannot. The same product, two consent rules. Once the housing tests finish, units are slated for the Medical Center, including the Biological Biomedical Sciences Research Building, Healthy Kentucky Research Building, the Dental Wing, and the Combs Cancer Animal Center.
The Schedule the University Has Not Written
Alcatraz’s privacy materials leave template retention to the “solution owner.” That owner is UK. The reviewed university pages do not state how long a Facial Signature is kept after a student graduates, transfers, or drops out of the pilot. They do not say who inside UK can join a badge number back to a name, under what standard, or with what log. The template is not a name. The access-control system that holds the badge is.
UK Police says biometric data is collected only to verify building entry, and enrollment mail comes from [email protected] at the university’s prompting. That is a purpose statement. It is not a deletion date.
Before this moves past two dorms and a set of labs, the university owes four documents: a retention schedule with a hard deletion deadline, a protocol for people who leave, an independent error-rate review of the pilot, and a written rule that Wildcard and mobile ID will not be slowed, underfunded, or removed. Without those, students are living in a building whose door now reads their face, on terms the campus has not finished writing.
