Camera off
No camera, no capture. The default for ordinary classroom assessment, and the right setting for the majority of exams most institutions run.
Security & Privacy
Security, Privacy and DPDP Compliance
Proctoring collects some of the most sensitive data an institution handles — a candidate's face, their screen, their behaviour. This page sets out exactly what Online Exams captures, what it does not, how long it is kept and who can reach it.
Data minimisation
Four Proctoring Modes, and One of Them Stores Nothing
The strongest privacy control is not encrypting data well. It is not collecting it. Proctoring is set per exam, so a weekly class test does not have to carry the same footprint as a final.
Camera presence
The camera is on and visible to the candidate, and nothing is stored and nothing is analysed. It deters the behaviour a proctored exam is meant to deter without creating a single byte of biometric data to protect, retain or later delete.
Snapshot
The camera is on and stills are captured at intervals. Far less data than a recording, and enough evidence to review a flagged attempt.
Full recording
The whole attempt is recorded. Reserved for high-stakes examinations where the evidentiary standard genuinely requires it.
Set per exam, not per account
Because the mode is a property of the exam, an institution can run a term full of camera-off tests and one recorded final without changing a platform-wide setting.
The candidate can see it
In every camera mode the candidate sees their own feed before and during the exam. Covert monitoring is not something the platform is capable of.
Retention
Evidence That Does Not Accumulate Forever
Most platforms make it easy to start recording and hard to stop storing. Retention is a first-class control here, not an afterthought.
You can see what you hold
A storage screen reports proctoring evidence in use — recordings, snapshots and identity images — broken down so an administrator knows what exists before deciding what to keep.
You can delete it
Evidence can be removed from the same screen. Deletion is a normal administrative action, not a support ticket.
Storage is bounded
Each account carries a storage allowance by plan, checked when evidence is uploaded. The limit is a retention forcing function as much as a commercial one.
Candidate rights
Deletion That Actually Deletes
Students and examiners can close their own account from inside the product. No email, no ticket, no waiting on us.
A deletion request enters a 30-day grace period, during which it can be cancelled — a safeguard against a decision made in frustration or by mistake. When it comes due, a scheduled job carries it out.
Records that must survive for the institution's own integrity — a completed exam's result, an audit trail an examiner is entitled to keep — are anonymised in place rather than destroyed, so the candidate's identity is removed without falsifying an examination record. Where an account cannot be closed cleanly, the platform explains what is blocking it instead of failing silently.
- Self-service, from within the account
- 30-day cancellable grace period
- Scheduled purge, not a manual process
- Anonymisation where an exam record must persist
- Blockers explained before the request is made
DPDP Act 2023
What the Act Asks For, and Where the Platform Helps
India's Digital Personal Data Protection Act carries penalties of up to ₹250 crore per violation, and proctoring sits squarely inside its scope. Under the Act your institution is the Data Fiduciary and we process on your instructions — so this is a division of responsibility, not a certificate we can hand you.
Purpose limitation
Choose the least intrusive proctoring mode that meets the exam's actual risk. The platform makes that a per-exam decision so the choice can be justified exam by exam.
Notice and consent
Candidates see the camera before the exam begins and know when they are being monitored. Your consent notice remains yours to write and to serve.
Storage limitation
Visible evidence holdings and administrator-initiated deletion, so retention can be a policy you enforce rather than a default you inherit.
Erasure
Self-service account deletion with a scheduled purge, and anonymisation where an examination record must legitimately survive.
Access control
Role-based permissions across examiner, moderator, approver and administrator, so evidence reaches the people entitled to review it and no one else.
Children's data
Where you assess minors, the Act sets a higher bar. Camera-presence mode is the setting to reach for first: monitored conditions with no biometric record created at all.
A written data processing agreement is available on request. A serious vendor should point you at a document, not a slide — ask us for ours.
Exam integrity
Proportionate Monitoring
Integrity controls are configured per exam, so the level of scrutiny matches what is at stake.
Graduated flagging
Attention and presence signals are weighted by severity rather than treated alike. A candidate glancing away is not the same event as a candidate leaving, and the platform does not record them as though they were.
Budgets before consequences
Minor signals accumulate against a budget rather than ending an attempt on the first occurrence, so ordinary human behaviour does not fail an honest candidate.
Evidence a human reviews
Flags surface for review with their evidence attached. Decisions about integrity are made by your moderators and approvers, not by the software.
Full-screen enforcement
Optional per exam, for the papers where it is warranted.
Identity verification
Optional per exam, so a low-stakes quiz does not require the same proof as a certification.
Moderation workflow
Separate moderator and approver roles for papers and results, so no single account both sets and approves a high-stakes exam.
Questions we expect
Ask Us Before You Buy
If you are evaluating platforms, these are the questions worth putting to every vendor on your shortlist — including us.
Can we run exams without storing biometric data?
With us, yes — camera-presence mode. Ask the same of any vendor whose proctoring is all-or-nothing.
Who can see recorded evidence?
Role-based access decides it, and the roles are yours to assign.
What happens when a student leaves?
They can close their own account, with a grace period and a scheduled purge.