Legal
Privacy policy
This page is a placeholder pending legal review.
This is not yet a reviewed legal document. It describes how the platform actually behaves today so the summary is accurate, but it has not been through legal review and it does not yet meet the disclosure requirements of any specific jurisdiction. Do not rely on it in a procurement process. Ask us for the reviewed policy instead.
What is collected
For a candidate: the identity document image and the live selfie used to verify them, the name matched against the institution roster, and the proctoring evidence produced by the tier the institution selected for that exam. For staff: the account details needed to sign in and the record of the actions taken in the consoles.
What is not collected
No payment details of any kind. ExamLense processes no payments; invoicing lives entirely in the institution's finance relationship with us. No data is ever requested from a government identity registry.
How long it is kept
On the Lite tier, webcam snapshots are analysed and deleted immediately, and no biometric media is retained. On the Standard and Pro tiers, evidence is retained for the period the institution configures. The append-only audit log is retained for the institution's stated record-keeping period and exported monthly.
Who can reach it
Every institution is a separate tenant, and the tenant is derived from a validated token rather than from anything a browser sends. Reviewers see only the sessions in their queue. Media is never public and is served only through short-lived signed URLs.
Where it is held
On managed infrastructure inside the European Union, encrypted at rest and in transit. Data residency in another region is available where a contract requires it. We will name the region and the sub-processors in writing during procurement.
Compliance
ExamLense strictly follows the compliance guidelines set out in SOC 2, the GDPR, Ghana's Data Protection Act, and the equivalent data protection laws of every market our institutions operate in.
Questions
Write to privacy@examlense.com. A data subject request from a candidate should normally go through the institution that set the exam, since they are the controller of the roster and the exam record.