SECURITY & PRIVACY
Clear controls for
sensitive exam data.
Exams involve candidates' names, faces and sometimes ID cards. Here is how ProctorGrid handles them. If your organization needs more detail, ask us and we will answer in writing.
Signing in
- Staff: a password and an emailed codeStaff enter their password, then verify their email with a code. Codes expire after a few minutes and stop working after too many incorrect attempts.
- Candidates: assignment and email codesCandidates enter their assignment code, then verify their email with a one-time code. No password setup is needed.
- Staff passwords are kept safeStaff passwords are stored in a protected form that cannot be read back. Repeated incorrect attempts temporarily block password sign-in. Changing a password signs out other sessions. To reset a forgotten password, staff verify their email with a code, then choose a new password.
- Staff recovery codesStaff can save a set of single-use recovery codes for times their email cannot be reached. Each works once, only after the password.
- Organization rulesAn organization can limit staff invitations to its own email domain and set how long a staff sign-in lasts.
- Signing out ends the sessionWhen someone signs out, their session stops working everywhere, not just in that browser.
- Candidates need an assignment code tooA candidate can only open an exam they have been given a code for.
Who sees what
- Each organization is separateOrganization staff access their own organization’s candidates, exams, and results according to their role.
- Roles and departmentsA department admin sees their department. An evaluator marks, a proctor watches. Each role sees what the job needs.
- An audit logImportant changes, such as editing an exam or a result, are recorded with who made them and when.
Recordings and ID photos
- Only when the exam asksNothing is recorded, and no ID photo is taken, unless the exam is set up for it. Candidates are told before they start.
- Private storageRecordings and ID photos are stored privately. Staff open them through short-lived links that stop working after a while.
- Encrypted on the candidate's computerThe desktop app encrypts each piece of a recording on the computer before it is uploaded.
- Storage visibilityOrganization admins can see usage and recording counts, with warnings as their allowance fills up.
- Retention and deletionAuthorized admins can configure retention and request removal of selected recordings and identity evidence. Holds protect records that must be retained, and deletion activity is auditable.
During the exam
- Answers are saved as they are typedIf the connection drops, answers are kept on the candidate's computer and sent when it returns.
- Exam timing is checked independentlyChanging the computer’s clock does not add time to the exam.
- Marking stays with your staffAutomated flags never change a mark by themselves.
Planning a data protection review?
Discuss your retention, access, and institutional requirements with us before rollout. We can explain the controls and their scope so your team can assess suitability. Request a security discussion.