Security

Data & retention.

What is collected, why, who can see it, and how long it stays.

What is collected, who can see it, and how long it staysThe institution is the data controller and Exam Center is the processor, acting on its instructions. Collected on every exam: candidate identity as the institution supplies it, the answers submitted, the events of the session, and the results. Collected only when the institution has enabled proctoring for that assessment: webcam, screen and audio segments, and the typed detections derived from them — an exam with proctoring off produces none of it. Access: a grader sees answers and uploaded files; a reviewer sees proctoring evidence for cases assigned to them but cannot open uploaded answer files, which is a grading permission; Exam Center staff can see nothing without a time-boxed window the institution grants. Retention for recordings, evidence and results is set per account and per data class by the institution, not fixed by us.You are the controller.WE PROCESS ON YOUR INSTRUCTIONS, FOR YOUR EXAMS01What is collectedON EVERY EXAMIdentity, as you supply itAnswers submittedSession eventsResults and scoresONLY IF YOU ENABLE PROCTORINGFOR THAT ASSESSMENTWebcam segmentsScreen segmentsAudio segmentsTyped detections02Who can see itACCESS FOLLOWS THE ROLE MODELGraderanswers, and uploaded filesReviewerevidence for their casesReviewerNOT uploaded answer filesExam Centernothing, without your windowEVERY IMPERSONATION IS AUDITED03How long it staysPER ACCOUNT, PER DATA CLASSRecordingsyou set the periodEvidenceyou set the periodResultsyou set the periodTHREE CLASSES, THREE CLOCKSNOT FIXED BY US
01

You are the controller

The institution is the data controller. We process candidate data on your instructions, for the purpose of running your exams.

Controller and processorThe institution is the data controller. Exam Center processes candidate data on the institution’s instructions, for the purpose of running its exams.Your institutionDATA CONTROLLERDECIDES WHY AND WHATinstructsExam CenterDATA PROCESSORACTS ON INSTRUCTIONSYOU DECIDE WHAT IS COLLECTEDAND FOR HOW LONG IT IS KEPT
02

What is collected

Candidate identity as you provide it, answers and session events, and — where proctoring is enabled for that assessment — webcam, screen and audio segments, plus the detections derived from them.

What is collected, and whenIdentity and answers are always collected. Camera, screen and audio are collected only where proctoring is enabled for that assessment.ALWAYSIF ONIdentityAnswersCameraScreenAudioPROCTORING IS PER ASSESSMENT, NOT BLANKET
03

Who can see it

Access follows the role model. Reviewers see proctoring evidence for their cases; they cannot see uploaded answer files, which is a grading permission. Our staff cannot see your account without a time-boxed window you grant.

Who can see whatAccess follows the role model. Reviewers see proctoring evidence; only graders see uploaded answer files; our staff see nothing without a granted window.EVIDENCEANSWERSReviewerGraderAccount adminOur staffOUR STAFF NEED A WINDOW YOU GRANT
04

How long it stays

Retention is configurable per account and per data class. Recordings, evidence and results can carry different periods.

Retention is set per data classRecordings, evidence, answers, results and the audit log can each carry a different retention period, configured per account rather than fixed by the vendor.Each class, its own periodRecordingsEvidenceAnswersResultsAudit logCONFIGURED PER ACCOUNT — NOT FIXED BY US
05

Candidates are told

Candidates are told before the exam what is enabled for that exam. Proctoring is per assessment, so the answer is specific rather than blanket.

Candidates are told firstCandidates are told before the exam what is enabled for that exam, and asked for permission by the browser.Told what is onBEFORE THEY STARTBrowser asksCAMERA · SCREEN · MICThey beginKNOWING WHAT IS ONSPECIFIC TO THAT EXAM, NOT BLANKET

Bring one paper. We'll run it live.

Thirty minutes, your own exam, no slide deck.