Security

Security is at the core of our AI assessment infrastructure. We protect student data and exam integrity with enterprise-grade defenses.

Infrastructure Security

All of our services run in the cloud. We do not host or run our own routers, load balancers, DNS servers, or physical servers. Our infrastructure is spread across multiple availability zones and will continue to work should any one of those data centers fail.

Data Encryption

  • In Transit: All data sent to or from our infrastructure is encrypted in transit via industry best-practices using Transport Layer Security (TLS).
  • At Rest: All user data, including exam recordings and transcripts, is encrypted at rest using AES-256 encryption.

Exam Integrity (Anti-Cheat)

Our AI proctoring system uses privacy-preserving analysis to detect anomalies. It analyzes:

  • Voice Biometrics: Ensuring the speaker matches the registered student.
  • Environment Analysis: Detecting unauthorized individuals or resources.
  • Browser Locking: Preventing tab switching or unauthorized tool usage during sessions.

Compliance

We are committed to complying with GDPR, FERPA, and other relevant data protection regulations. We perform regular security audits and penetration testing.

Responsible Disclosure

If you discover a vulnerability, we would like to know about it so we can take steps to address it as quickly as possible. Please email security@scira.com.