Data Protection
- DPDP readiness with lawful basis registry
- GDPR DPA and data processing agreements
- Regional data residency options (India/EU)
- Transparent data flows and consent management
Trust & governance
Security & compliance.
Transparent security practices and compliance-supporting workflows for high-trust exam delivery.
Built for organizations where exam trust is non-negotiable.
Security controls, privacy-aware workflows, and compliance planning designed for certification bodies, universities, and regulated exam programs.
Controls
Security controls.
Encryption
- Encryption in transit (TLS 1.3)
- Encryption at rest (AES-256)
- Local video encryption
- Key rotation and management
Access Control
- Role-based access control (RBAC)
- Multi-factor authentication (MFA)
- Single sign-on (SSO) support
- Audit logs for all access
Infrastructure Security
- Secure cloud infrastructure
- Network segmentation
- DDoS protection
- Regular security updates
Certifications
Compliance certifications & standards.
ISO 27001/27701
Roadmap to ISO 27001 (Information Security) and ISO 27701 (Privacy Management) certifications with regular audits and continuous improvement.
DPDP (India)
Privacy-aware workflows designed to support DPDP readiness, including consent, purpose limitation, and data residency planning.
GDPR (EU)
GDPR-supporting practices such as data processing agreements, privacy-by-design controls, and configurable retention policies.
WCAG 2.2 AA
Accessibility-minded design roadmap for candidate and administrator experiences.
Privacy
Privacy by design.
Data Minimization
Collect only necessary data for exam delivery and integrity monitoring.
Tokenized Data
Personal data tokenization where possible to reduce exposure.
Transparent Consent
Clear consent prompts explaining data collection and usage.
Data Subject Rights
Support for data access, rectification, and deletion requests.
Retention
Data retention.
Configurable data retention policies aligned with your requirements:
Standard Exams
- 90–180 days retention
- Configurable per deployment
Certification Exams
- Client-defined retention for audit requirements
- Scheme-aligned evidence packages
Audit & Testing
- External VAPT by third-party security firms
- Quarterly disaster recovery drills
- Regular security audits and compliance reviews
Accessibility
- Keyboard navigation support
- Screen reader compatibility
- Color contrast compliance
- Accommodation workflows for extra time and assistive tech
Trust & governance
Discuss your security and compliance requirements.
Share your exam policy, data residency, retention, and audit requirements with our team.