Crayonic B.V. is incorporated in the Netherlands and has its headquarters in Eindhoven. Research, development and production are based in Bratislava, Slovakia.

The Crayonic Badge™ is a FIDO2-certified wearable for clinicians and other staff who share workstations. It combines login, physical access, paging, a panic button and AI scribing in one device. The Crayonic KeyVault™ is a compact USB/NFC/Bluetooth security key for individual users. Both are managed centrally with Crayonic Device Manager and Credential Manager.

Most security keys are a USB stick you plug in and touch. The Badge is worn all shift, and it checks who is wearing it on the device itself. It shows what you are approving on its own screen. It also replaces pagers, separate ID and access cards, and dictation microphones. One certified device covers digital login, door access, alerts and safety.

So that you see what you are approving on hardware an attacker doesn’t control. On a shared workstation, malware can send someone else’s login request to your key, and with a key that has no screen you can’t tell. The Badge’s e-ink touchscreen shows which workstation, site or transaction you are confirming before you consent. It also shows pages, critical alerts and your identity. E-ink stays readable without using power, which helps the battery last for weeks.

A fingerprint can’t be changed if it is ever compromised, and fingerprint matching is probabilistic, while a PIN either matches or it doesn’t. So the PIN stays the main factor, and you enter it on the Badge’s own touchscreen at the start of a shift, not on the workstation keyboard. That avoids the weakness of the standard FIDO2 Client PIN, where the PIN passes through a host computer that malware could control. After that, while the Badge stays on your body (detected by its on-body sensor), a quick fingerprint touch confirms it’s still you for each login. Clinicians log in dozens of times a shift, so this takes seconds instead of re-entering a PIN every time. Gloves and hand hygiene are covered by the PIN fallback, and security stays tied to a factor that can be revoked.

A Crayonic Bridge on each workstation connects to the Badge over secure Bluetooth and uses radio measurements to define a zone around it. In open areas the zone can be large, so a clinician is logged in automatically on entering it and logged out on leaving, without touching anything. In tight spaces with several workstations close together, the zone shrinks to the size of an NFC reader, or login asks for a click on the PC and a tap on the Badge, so the right session always opens on the right machine.

Yes. The Badge is FIDO2 Level 1 certified and attested for Microsoft Entra ID, and FIDO2 Level 2 certification is in progress, targeted for 2027. Its keys are kept in a Common Criteria EAL5+ certified secure element. An embedded Thales IDPrime QSCD is optional for qualified electronic signatures.

Only inside the Badge’s secure element. The template never leaves the device and is never sent to a server or the workstation. Servers hold only a public key, so a server breach exposes no biometric data. If a Badge is lost, its credentials can be revoked remotely.

Yes. Authentication runs on the device and on local infrastructure, so there is no single cloud point of failure. Login keeps working during internet or cloud outages.

Phones are always online, run third-party apps and carry many known vulnerabilities, so credentials on them are only as safe as the phone. People also change phones often, and moving keys between devices is hard. And smartphones can’t be certified to standards like Common Criteria, which high-assurance identity requires. A dedicated certified device that works offline avoids all three problems.

CDM is a web platform for monitoring, managing and auditing every Crayonic device (Badge, KeyVault and Bridge) across your organisation. It shows who accessed what, when and how, with real-time security events. It can update and configure devices remotely, and one installation can serve several organisations.

Yes. CDM can be deployed on-premises or in the cloud (Azure, AWS, GCP or a private cloud). It has a REST API and integrates with Microsoft Entra ID, Microsoft Sentinel, Microsoft Security Copilot and other SIEM platforms.

CCM is a web application for managing the full life cycle of credentials. Administrators can create users in Entra ID, register Badge serial numbers, create passkeys for users directly on their Badge or KeyVault, and remove passkeys that are no longer needed from both Entra and the device. It is simple enough for HR to use when onboarding staff. Support for X.509 certificates and shared secrets is coming soon.

Yes. If the organisation allows it, CCM offers self-service passkey registration and recovery without HR or IT involvement.

For Microsoft environments: Windows 10 (1903 or later) or Windows 11 with the Crayonic Agent installed, any Microsoft Entra ID tenant, and an admin account with the Global, Authentication or Privileged Authentication Administrator role. Full documentation is at crayonic.io.

Yes. Crayonic supports open-source identity platforms such as Keycloak and is compatible with any standards-based IAM, SSO or directory service and operating system.

Secure Scribe records clinical conversations on the Badge under the doctor’s own identity. Audio is encrypted end to end, from the moment words are spoken until the AI processes them. A compatible medical speech-to-text service then turns it into clinical notes for the patient record in the EHR, so clinicians spend less time on manual data entry.

Every recording is tied to one authenticated clinician, not to a shared workstation or a personal phone. Recording rights end the moment the clinician’s Badge or credentials are revoked. That closes the main risk seen in real AI-scribe incidents: recordings made on personal devices after access should have ended.

Yes. The Badge records and stores encrypted audio offline and syncs it to the clinician’s secure workspace once it is connected.

Secure Scribe connects to EHR systems through compatible medical AI transcription services. Contact us for the current list of integrations.

The clinician. AI transcription starts only after they sign in to the Secure Scribe app with their Badge. They can edit the raw audio, the raw transcript before AI processing and the clinical notes the AI produces. Only then are the notes pushed to the EHR (for example Epic), under the clinician’s own identity and to the right patient.

Audio is end-to-end encrypted and can only be decrypted with the key on the clinician’s Badge. That key has no backup and no recovery, so nobody else can open the recordings. Encrypted audio can be wiped automatically after a period set by your organisation’s policy.

KeyVault suits individual users and office or remote staff who need a strong, portable key. The Badge is built for shared workstations, clinical workflows and organisations that also want physical access, paging and staff safety in the same device.

Windows and Entra passwordless login, FIDO2/WebAuthn sign-in, PIV smart card over USB/NFC (for example for VPN), OTP generation, secure storage, a hardware password manager, NFC door access and follow-me printing.

Contact us to request samples of the Badge or KeyVault, plan a pilot or discuss a larger rollout. We can also connect you with an integration partner in your region.