Three Layers are Better Than One
<p>
Our Test-Taker’s data (including all video, screen and audio recordings) is secured and processed through three layers of encryption:
</p>
<ol>
<li>
Transmission into the datacenter is only over TLS 1.2 or 1.3 and, if the client supports it, we use Perfect Forward Secrecy (PFS).
</li>
<li>
Data at rest within the data center is encrypted using AES-256 and is FIPS 140-2 compliant.
All data centers are ISO 27001 certified, SOC 2 attested.
</li>
<li>
Lastly, the zero-knowledge layer is secured using AES-GCM, using encryption keys never shared with Proctorio.
</li>
</ol>
<p>
Let’s breakdown that last and most important layer: <strong>zero-knowledge encryption</strong>.
</p> Zero-Knowledge Encryption
<p>
Proctorio utilizes <strong>zero-knowledge encryption</strong>, which means we have zero access to the encrypted data on our own servers.
This unique design allows nothing to leave your computer until after it is encrypted.
Data never becomes unencrypted until it's unlocked by an authorized school official.
It’s not just end-to-end encryption, it’s a zero-knowledge system.
</p> Daily Vulnerability Tests
<p>
Our platform goes through daily vulnerability and penetration tests to assess the strength of our systems against a potential attack.
Partnered institutions can see these daily vulnerability scans under an NDA.
This creates a security system you can trust.
</p> A Friendly Reminder
<p>
Proctorio never requires test-takers to provide additional personal information (PII) to access an exam.
Students simply sign in their LMS with their institution’s credentials and access their assessment.
For third party platforms, a unique passcode is generated and managed by Proctorio, so that the students can access the exam effortlessly even when taking the exam outside of their LMS and/ or testing platform.
</p>
<p>
The exam data is transferred and stored with zero-knowledge encryption, and can only be accessed by your exam administrators.
</p>
<p>
Learn more about Proctorio’s Privacy standards and measures.
</p>
<p>
Questions regarding data storage, recovery, and deletion should be directed to:
</p>
<p>
Proctorio<br>
6840 E.
Indian School Road<br>
Scottsdale, Arizona 85251<br>
Email: security@proctorio.com<br>
</p>