Data Processing Agreement
Effective Date: May 17, 2026
This Data Processing Agreement ("DPA") governs the processing of personal data by MonitorExam on behalf of institutions and customers.
Contents
Roles
Customer
The institution or organization using MonitorExam services acts as the Data Controller.
MonitorExam
MonitorExam acts as the Data Processor on behalf of the Customer.
Categories of Data
MonitorExam may process:
- Candidate identity data
- Examination recordings
- Audio and video streams
- Screen recordings
- Browser activity logs
- AI-generated alerts
- Authentication logs
- Administrative records
Purpose of Processing
Data processing is performed solely for:
- Conducting examinations
- Maintaining exam integrity
- Identity verification
- Audit logging
- Security monitoring
- Customer support
Confidentiality
MonitorExam personnel with access to personal data are subject to confidentiality obligations and must maintain strict confidentiality of all customer data.
Security Measures
MonitorExam implements safeguards including:
- Encryption in transit and at rest
- Access restrictions and role-based controls
- Audit logging of all data access
- Network security controls
- Secure development practices
- Continuous monitoring systems
Subprocessors
MonitorExam may engage subprocessors for:
- Cloud infrastructure
- Content delivery
- Email delivery
- Analytics
- AI services
A current list of subprocessors is maintained at:
Incident Notification
MonitorExam will notify customers of confirmed security incidents affecting personal data within a commercially reasonable timeframe, in accordance with applicable law.
International Transfers
Where international transfers occur, MonitorExam applies reasonable safeguards and contractual protections to ensure compliance with applicable data protection regulations.
Data Deletion
Upon termination of services, data may be deleted or returned subject to contractual requirements, legal obligations, and backup retention schedules.
Audits
Customers may request reasonable security and compliance documentation to verify MonitorExam's adherence to this DPA and applicable regulations.