Security & privacy
Built for exam-grade security
Exam answers are sensitive. Scholametrix is designed so that student data stays private, every mark is accountable, and your institution stays in control.
1 / 3
Student data
Never used for training
Answers are processed only to mark them. AI providers are restricted to zero-data-retention hosts.
Anonymous processing
The AI service never receives student names or IDs. It only sees the answer text and an anonymous reference your system maps back.
A teacher decides every mark
AI output is stored as a suggestion. Nothing is released to students without a teacher’s approval.
2 / 3
Access & accountability
Role-based access
Admins, department heads, teachers and students each see only their own scope: faculty, department or course.
Strong sign-in
Hashed passwords, rate-limited sign-in and two-factor authentication for administrators.
Audit log
Approvals, mark changes, publishing and configuration changes are recorded with who and when.
3 / 3
Infrastructure
Encrypted secrets
API keys are stored as hashes. Connection secrets are encrypted with AES-256-GCM and only ever shown masked.
Signed integrations
Results are delivered with an HMAC-SHA256 signature and timestamp, so they can’t be forged or replayed.
Private databases
Databases and queues are never exposed to the internet. All traffic is encrypted with TLS.
Your servers, if you prefer
Institutions with strict data-residency rules can run the evaluation service on their own infrastructure.
For your IT and legal teams
Common questions
Where is data processed?
Our hosted service runs on dedicated servers. AI marking calls go to zero-data-retention model hosts. If your policy requires it, the service can run entirely on your own servers.
Who can see student answers?
In the e-Exam platform, only the teachers assigned to the course and the administrators of that scope. The AI service sees answer text without names or IDs.
Can we get our data out?
Yes. Results, mark sheets and reports export to Excel, and API customers keep all results in their own system.
Do you have a security contact?
Yes. Email [email protected] with “Security” in the subject. We respond to security reports as a priority.
Need a security review before a pilot?
We’ll walk your IT team through the architecture, data flows and deployment options.