SAFR Server stores images along with a biometric signature when a face is enrolled.  The images are stored as encrypted files on disk (can be local or use network attached storage).  The biometric signatures are stored along with the credentials and name in an encrypted internal database.  

When connected to SAFR SCAN, it will sync the biometric signature along with credentials to the safr scan device. It can also optionally sync the images to the device.  SAFR SCAN can store the data either in a secure boot partition or in memory only (loaded when connected to server and discarded when device powers down - next time device boots up it pulls all the data back down thru secure connection).