Security designed for confidential marking
Answer scripts and marks are among the most sensitive records an institution holds. These are the controls that protect them.
Blind marking
Examiners see only a random script code. The link between code and candidate is visible to authorised administrators alone.
Images, not files
Examiners never receive the original PDF. Pages are served as rendered images over links that expire within minutes.
Dynamic watermarks
Every page image carries the examiner's ID, the time and their network address, tiled across the page.
One active session
Signing in on a new device ends the previous session. Idle sessions sign out automatically, and admins can enable two-factor authentication.
Network and device rules
Restrict sign-in to approved IP ranges per institution or centre, and optionally bind examiners to their registered device.
Tenant isolation
Each institution's data is filtered at the database itself with row-level security, in addition to checks in every query.
Append-only audit log
Sign-ins, page views, score changes, submissions, unlocks, allocation changes, exports and publishing are recorded. The application cannot alter or delete entries.
Encryption
Traffic is encrypted in transit with TLS, and databases and file storage are encrypted at rest.
Data protection and privacy
The platform is designed around India's Digital Personal Data Protection Act, 2023, and GDPR-style principles. Candidate data is kept to what evaluation needs, consent is recorded for candidate uploads, and retention periods are configurable per institution so data can be erased when it is no longer required.
Logs never contain passwords, tokens or candidate personal data, and access to identity information is itself audited.
A note on screen capture
In the evaluation screen, right-click, text selection, dragging and printing are disabled. These are deterrents rather than guarantees: no web application can stop a determined person photographing a screen. That is why every page is watermarked with the viewer's identity, so any leaked image can be traced.
See it with your own answer scripts
Book a walkthrough. Bring a sample paper and we will show it moving from scan to result.