Data Privacy & Security

Overview

Proctorio is committed to protecting data privacy and security at every level. Our systems are built with advanced encryption and intentionally designed to block unauthorized access, including by Proctorio itself. To stay aligned with global standards, we continuously monitor evolving data privacy regulations and voluntarily undergo regular, independent security audits.

Our Promise

Proctorio will never share or sell test-taker data. Why?

  • Because it’s the right thing to do.
  • Because most data privacy laws prohibit it.
  • Because our systems are deliberately designed to make it impossible.

Why it Matters

Taking an exam can already feel stressful, and worries about privacy shouldn’t make it harder. With Proctorio, test-takers can feel confident that their data and recordings are secure and never available to just anyone. Before each exam, we disclose all recording options, as well as the location and retention period of collected data, so test-takers know exactly how their information will be handled. This transparency helps reduce concerns and build trust.

Compliance

The image is an abstract digital illustration featuring a computer window with a green screen displaying a security shield with a checkmark, symbolizing cybersecurity, compliance, or data protection. Surrounding the screen are various elements, including leaves and a wine bottle, suggesting themes of sustainability, regulation, or eco-conscious technology. The European Union stars in the background indicate a possible connection to GDPR compliance or European data security standards.

Privacy Laws

Proctorio systems and products comply with the following regional privacy laws:

  • Family Educational Rights and Privacy Act (FERPA)
  • Children's Online Privacy Protection Act (COPPA)
  • California Consumer Privacy Act (CCPA)
  • Student Online Personal Information Protection Act (SOPIPA)
  • Assembly Bill No. 1584 (AB-1584)
  • European Union’s General Data Protection Regulation (GDPR)
  • Freedom of Information and Protection of Privacy Act (FIPPA)
  • Freedom of Information and Protection of Privacy Act (FOIP)

Industry Certifications

Proctorio follows widely recognized industry standards and completes regular internal and independent third-party audits to ensure ongoing compliance. Our certifications and audit reports are available in the Proctorio Trust Center (or by request).

How We Protect Your Data

This digital illustration symbolizes data privacy and security. A green and black umbrella serves as a protective shield against falling lines, representing potential cybersecurity threats or data breaches. Beneath the umbrella, important documents, a yellow file folder, an identification card, and a digital signature are safely covered, emphasizing protection of personal information and sensitive data. The color scheme reinforces a secure theme, aligning with concepts of digital privacy, compliance, and data security.

Zero Knowledge End-to-End Encryption

Proctorio protects all assessment data with advanced encryption. Only the institution or organization holds the decryption key, giving them sole control over who can access the information. Proctorio employees cannot view assessment data or recordings unless access is explicitly granted by the institution.

Pseudonymization

Proctorio uses pseudonymization to protect personal data by replacing identifiers, such as names or email addresses, with unique codes. For example, support agents see only a code instead of a name, allowing them to resolve technical issues without accessing personal details. These codes cannot be used to reconstruct or reveal the original personal information.

Active Avoidance

Proctorio does not collect unnecessary personal information. We only gather the minimum data required to provide services, which reduces both risk and exposure.

Limited Data Retention

Data is stored only for as long as it is needed. Each institution or organization sets its own retention policy, which defines how long data is kept before it is permanently deleted.

Continuous Monitoring

Proctorio’s systems undergo regular internal reviews, independent audits, and security tests to ensure compliance with strict privacy and security standards. Certifications and audit reports are available in the Proctorio Trust Center.

Employee Training

All Proctorio employees complete annual FERPA training and data privacy and security training to ensure information is handled responsibly.

FAQ

Does Proctorio use my data to train its AI model?

Proctorio does not use end-user exam content, video, or recordings to train its AI models. Proctoring and detection models are trained on separate datasets that are either collected with consent or publicly available. Support chat conversations are handled separately, as described below.

Proctorio may use de-identified data from customer support interactions — including conversations conducted via chat, email, voice, or social media, with institution staff and, where applicable, users who contact support directly — to train and improve our AI-powered support tools.

How much access does Proctorio have to my device?
Proctorio only requests the permissions needed to run the exam. It cannot access personal files on your device or monitor anything you do outside the exam session.
Who can access exam data?
Only authorized staff at your institution can access exam data and recordings. All information is protected with zero-knowledge, end-to-end encryption, which prevents Proctorio employees or anyone else from viewing it without the institution’s permission.
Where can I view Proctorio's data privacy and security audit reports and certifications?
You can view Proctorio’s audit reports and certifications in the Proctorio Trust Center. Some sensitive documents may require signing a non-disclosure agreement (NDA) before access is granted.
More help categories
Proctorio Help Center

Can't find what you're looking for?