The school or organization decides how the Remote Proctoring features will be configured and used during exams. Depending on which settings are enabled, different data will be processed by Digiexam. The ability to choose how to configure the Remote Proctoring tool is there to meet the variety of data protection requirements that a school or organization might have.
Digiexam uses students' personal information in order to provide the service of taking exams and academic tests digitally. The purposes of collecting personal information are:
- Provide the service to allow students to take digital exams and tests
- Improve the service by understanding how students use it
- Provide support for the service
Biometrical data will be extracted and stored with the students’ personal information if the “track misuse metrics” setting is enabled. Data connected to the Remote Proctoring tool is only visible on the web application and viewing rights is controlled by the role in Digiexam. Only someone with access to the exam in Digiexam can view the processed data.
An Exam Supervisor/Invigilator can only use the proctoring view when the exam is live and can't access it anymore after the exam’s ended.
Video streams and recordings
If video streams are used, the video streams are running live with SSL encryption as a P2P solution where a TURN server is relaying the traffic between peers that are directly involved in the stream. For example, if an exam supervisor is looking at a specific student stream, the live stream is only going between the exam supervisor and the student set up through the TURN server. The streams themselves are not saved or stored.
The video seen on a session in the proctoring admin view comes from small video snippets that are recorded locally and then uploaded to Digiexam continuously during the session from the students' computer. The video files are stored on Digiexam (Google Cloud Storage) servers. The files are encrypted at rest and only decrypted when authorized access is made by the proctoring software. No personal metadata is saved in the actual video files, names etc. is not stored together with the videos.
Photo and face recognition
If a face photo is in use, a photo of the student's face is extracted and then sent to Digiexam (Google Cloud Storage) where it is encrypted at rest. No personal metadata is saved with the photo, names etc. is not stored together with the photo.
The photo is also sent to a recognition server that outputs biometric data (descriptors).
Audio
If audio is in use, audio is only used to detect conversation and noise. Only the presence of a signal is detected, not recognition and no audio is stored separately from the video file.
DPA & Subprocessors appendix
The Remote proctoring tool has an additional subprocessor on top of the standard sub-processors that Digiexam uses. That subprocessor is MongoDB - A service for database server management that is used specifically for the remote proctoring tool.
All data is stored in the EU. More information regarding data in Digiexam can be found here: https://www.digiexam.com/data/
Kommentarer