How Examus Protects Users' Privacy

Here at Examus, we pay a lot of attention to our users' privacy protection. Here is what we do to ensure we do our best to protect their privacy.

Always encrypted

We have a strict rule that information must be protected as soon as it leaves the device. Therefore, all data is transmitted to the Examus server over a channel uniquely encrypted with SSL certificates. SSL certificates and private keys (tokens) are also used for logging into the client's cloud infrastructure.

Access to the proctoring system web interface is provided via the HTTPS protocol only. To boost reliability, the encryption is based on a maximum key size of 256-bits. And to prevent cyberattacks like MITM (Man-In-The-Middle), we use the largest trusted certification authority Globalsign.

Transparent operations with confidential data

The information collected during proctored online exams is available to a strictly limited number of people comprised of proctors, the technical support team from Examus, and the university or company staff. The confidential data list usually includes video and audio records of exams and examinees' personal information, such as full name, email, photo, and identification document.

To make our work even more efficient, we minimize the amount of collected data and limit its storage period. Personal information is used, archived, and destroyed according to ethical standards. Storage periods depend on terms prescribed in contracts. They usually range from two weeks to three months and can be changed at the client's request. In this case, a side agreement will be signed.

No automatic user identification

We do not check students' personal information provided in their identity documents. The Examus system only verifies the face image captured by the webcam with the photograph in the submitted document. The identification step is only required when proctors or university staff review exams.

During the exam, the neural network recognizes the presence of a human face on the screen and the angle of the head. This process does not require the students' identification and matching information search in the database. Therefore, user data stays anonymous to maintain maximum confidentiality.

Compliance with international law

Our company is fully GDPR (General Data Protection Regulation) compliant and can work with international customers. We keep written records of all processes, including the collected data. We have specialists who monitor compliance with all the requirements of international legislation regarding personal data processing.

Also, we have a well-defined privacy policy that allows our users to know what data we store and process and why, how it is used, and what measures Examus takes to keep it safe.

Reliable infrastructure

For information storage, Examus uses only trusted cloud-based services with all the necessary security certificates, such as MCS (Mail.ru Cloud Solutions), Google Drive, AWS (Amazon Web Services), and Microsoft Azure. Customers in Europe tend to prefer virtual storage from Google due to GDPR compliance. Solutions from AWS and Microsoft are popular with our US customers.

Patented technology

Copyright patents protect all our scientific developments and verified algorithms. Thus, we use legally protected solutions with proven scientific value.

All agreements legally registered on paper

Every agreement we sign with our customers clearly defines Examus as a processor and our client as a controller. We are attentive to every legal detail. Therefore, together with international law experts, we develop the most complete and transparent agreements (e.g., contracts and privacy policy). We realize that our company's and customers' reputations and our users' data security totally depend on how we work. Thus, we can confidently state that our clients do not need to worry about sensitive information safety since Examus will take good care of it.