Legal

Privacy Policy

Last updated: January 2026.

Data we collect

Account info (name, email), proctored-session recordings (video, audio, screen), device metadata, and event telemetry needed to detect exam-integrity issues.

How we use it

Solely to deliver proctoring services on behalf of your certifying body or institution. We do not sell personal data.

Retention

Recordings are retained per your organization's configured policy (default 60 days on Local Board, 1 year on Regional). You may request earlier deletion of your data.

Security

Encryption at rest and in transit, least-privilege access, audit logging, and quarterly penetration testing. SOC 2 Type II available under NDA.

Your rights

GDPR/CCPA rights of access, correction and deletion. Contact privacy@autoproctor.com to submit a request.