I appreciate your comments.

I think the interesting thing of our implementation is that it solves a lot of the issues you have concerns with. In our implementation the fingerprint/iris scan is one-way hashed into binary, so (even though its encrypted both in transit and storage), its of no value by itself. You can't get a fingerprint picture or anything back out of it once its stored.

I'm not sure which programs we'll include. I have a feeling we'll rely primarily on Windows permissions, meaning we won't log into your Quickbooks or password protected word documents or whatever. I can't get much into technical details but I'm not worried about false negatives in this scenario (its configurable to high threshold or low threshold depending on environment criterias). I'm more worried about having to log into stuff like Citrix and other third party programs.

Crashing Windows concerns me. Did the crashes happen during login or after?