It's "only on-device" as in the data isn't sent to MS servers (in theory). According to ms's docs, depending on the sensor implementation, the OS might have ac

It's "only on-device" as in the data isn't sent to MS servers (in theory). According to ms's docs, depending on the sensor implementation, the OS might have access to that data: https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-biometrics-in-enterprise https://learn.microsoft.com/en-us/windows/security/identity-... > Some fingerprint sensors have the capability to complete matching on the fingerprint sensor module instead of in the OS. These sensors will store biometric data on the fingerprint module instead of in the database file. So, knowing how most "enterprise" pcs get the cheapest possible implementation, I'd bet that in most cases windows stores the biometric data itself.