Canada
Hosting and processing in Microsoft Azure's Canadian regions and in your institution's own Microsoft 365 environment (Teams and SharePoint).
Security & privacy
Proctoring means recording students. We think institutions should know exactly what is collected, where it lives, who can see it and when it disappears, before they sign anything.
Principles
Your data, in Canada, for the exam only
- Owned by the institutionThe data belongs to your institution, which keeps control of it.
- Used only to provide the serviceNever used to train artificial intelligence models, never shared with third parties.
- Minimal by configurationEach type of capture can be switched off per security profile or per exam.
- No biometrics, no AINo facial template, no facial recognition, no automated analysis of behaviour.
What we collect
The full list, and how to limit it
Your institution decides which captures each exam needs. Everything not enabled is simply not recorded.
| Information | Details | Can be switched off? |
|---|---|---|
| Video and audio | The student's camera and microphone, depending on the configuration. | Yes, each one separately |
| Screen recording | Continuous recording of every connected screen. | Yes |
| Keyboard and mouse | Keyboard and mouse interactions during the exam. | Yes |
| Event log | Timestamped events: detections, alerts, session start and end. | No, it documents the exam |
| Exam data | Exams, groups and students synchronized from the student information system. | No, it is needed to run the exam |
| Biometric data | None. No facial template, and the video is never analyzed biometrically. | Not collected |
Hosting & access
Where the data lives, and who can open it
Microsoft only
Microsoft, as the cloud hosting provider, is the only subprocessor. There is no other.
Authorized people only
Recordings are visible to the teachers and administrators your institution authorizes. LS2 staff, all located in Canada, access data only for support, on request and with every access logged.
Retention
Kept as long as your policy says, then deleted
- Configurable retention. Your institution sets how long exam records are kept, up to seven years, in line with its own policies.
- Automatic deletion. Records are deleted automatically when the retention period ends, rather than stored indefinitely.
- Deletion on request. Records can also be deleted on request before the end of the period.
- Controlled consultation and export. Viewing is limited to authorized teachers and administrators; exports are performed by authorized people.
Security
Security and incident management
Encryption
Data encrypted in transit (TLS) and at rest.
Role-based access
Fine-grained rights for students, teachers, proctors and administrators.
Complete logging
A full, timestamped log of events for every exam, and a log of every access.
Law 25 incident process
Confidentiality incidents are handled under a process that complies with Quebec's Law 25, and the institution is notified without delay.
Documentation
Everything your privacy assessment needs
Available on request for your security and privacy review:
- A description of the architecture and data flows.
- Our privacy policy.
- Answers to your institution's security questionnaire.
- Support for your privacy impact assessment (PIA, or EFVP under Law 25).
Bring your privacy officer
We'll walk through the data flows, the capture settings and the retention controls live, and answer the hard questions.
Book a Demo