Identity and access
Define who may take an exam, who may review evidence and how exceptions are handled.
Evaluate the exam workflow, the data it uses and the people responsible for decisions. Agree the requirements for your deployment before rollout.
Controls and responsibilities depend on the delivery model. Use this overview to structure a technical and operational review with your team.
Define who may take an exam, who may review evidence and how exceptions are handled.
Discuss the data categories, storage location, access, retention and deletion requirements for your configuration.
Agree how events are reviewed, how decisions are documented and how participants can raise concerns.
Depending on enabled checks, the workflow may use participant and invitation data, identity photos or documents, answers, camera or screen recordings and session events. Confirm the enabled sources, access roles, hosting and retention for your programme before rollout.
Document the exam rules, lawful basis and notices, review roles, device requirements and escalation contacts.
Review the actual configuration, technical documentation, data handling and agreed support arrangements.