What we hold. For your staff: name, email, role. For your students: whatever you import — typically name, class and roll number, sometimes an email. Plus their answers, marks, and the conduct signals recorded during an exam.
Camera and microphone. Only for exams you set to a camera mode, and only during the sitting. The face analysis runs on the student's own device — whether a face is missing, whether there is more than one — and the video used for that is not uploaded for the purpose. In recording mode a recording is stored, currently on the application server.
What we never do. We do not sell data, do not use your content to train models, and do not show one institute anything belonging to another. That last one is enforced in the software rather than by policy, and it is tested.
Your students' rights. You can export or erase any individual student's data yourself, without asking us. If a student asks you directly, you do not need us in the loop.
Retention. Answers and results are kept until you delete them. Proctoring media is kept for the retention period set in your workspace, then purged.
Where it lives. On servers we operate. We are not certified against ISO 27001, SOC 2 or any similar standard, and there is no badge on this site claiming otherwise.