Proctoring can involve video, audio, screen images, device information and identity-verification results. Before deployment, identify which data the programme actually needs, where processing takes place and who can access the records.
Privacy depends on the complete deployment: architecture, configuration, agreements and staff practices. A technology label alone does not establish how data is protected.
Start with a data map
For each data type, record the purpose of collection, its connection to exam rules, processing and storage locations, access roles, retention and deletion arrangements, and any export needed for review or an appeal.
Not every assessment requires the same recordings. Agree the selected checks with the organiser and verify their behaviour in the intended configuration. Candidate instructions should describe that configuration accurately.
Video routing and encryption are separate questions
Peer-to-peer describes a connection model rather than an encryption algorithm. Depending on network conditions, media can require relay infrastructure. Review channel protection, key management, recording access and action logging separately.
A statement that video does not pass through a server in one operating mode should not be extended to an entire deployment without checking the actual data path.
Customer-controlled storage
If recordings will be placed in the organisation’s storage, validate compatibility, permissions, location, backup and deletion. An S3-compatible endpoint does not resolve these questions by itself.
Ask where metadata, temporary copies and operational logs remain. Control of one storage location does not imply that all system data exists only there. Confirm the behaviour of the selected deployment in technical documentation and the applicable agreements.
Reviewer access
Reviewers need the materials relevant to their responsibilities. Define who can view, download, share and delete recordings. Include changes to access when a staff member changes role or leaves.
Automated signals help prioritise sessions for examination. An authorised person decides whether the evidence supports a finding under the programme rules.
What to tell participants
Before the exam, explain the checks, recording arrangements, organiser contact and the route for technical help or a disputed decision. Provide a process for agreed accommodations and exceptions. Do not promise a retention period or storage location that has not been confirmed for the programme.
What to inspect during a demonstration
Follow a single session from collection through storage, reviewer access, export and deletion. Record questions requiring technical or contractual confirmation. Check that participant instructions and staff permissions match the demonstrated workflow.
This gives a buyer concrete actions and responsibilities to assess. It is more informative than an unqualified promise of complete confidentiality or data sovereignty.