The TOTP is generated by the HYPR-3 Token device and is verified by an API server. The HYPR validation server can be deployed on premise or on the HYPR-Secure biometric cloud.