I love that for context aware authentication you put a duck! As the saying goes,” if it looks like a duck, walks like a duck, talks like a duck, it’s a duck!”
Sensitive data can be stored and read locally on the mobile device. Does it mean that the device cannot be wiped if it's not connected to the internet?