Trust Center
How ScreenComply handles student data under FERPA.
ScreenComply is designed to support the institution's FERPA obligations, with exam-scoped collection and data handling under the institution's direction.
Who directs the use of student data?
ScreenComply acts as a school official under the institution's direction for the agreed proctoring service. The institution defines the assessment purpose, permitted checks and access to the resulting evidence.
This is not a blanket legal conclusion that any deployment meets FERPA. Your privacy and legal teams should review the service, the proposed use and the data processing agreement against the institution's obligations.
When is data collected, and what is it used for?
Proctoring data is collected only during the exam window. It provides a timestamped evidence record for authorized institutional reviewers to consider under their assessment and academic integrity policies.
Student data is not used for secondary purposes. Evidence supports a human review of the agreed assessment; it does not produce an automatic grade, failure or misconduct decision.
Who controls retention and deletion?
The institution sets retention under its policy and agreed data processing terms. The period should reflect the institution's review and appeal process rather than a default assumption that exam evidence must be kept indefinitely.
Deletion is available on request. Students should contact their institution to ask how its retention policy applies to their record and how to submit an access or deletion request.
Where is data held, and what documents are available?
US data residency is part of the institutional data handling posture. A data processing agreement is available for review so the institution can evaluate purpose, access, retention and deletion before deployment.
Review the security posture and accessibility documentation together with the student notice. Your institution remains responsible for deciding whether the proposed arrangement fits its requirements.
Frequently Asked Questions
Does ScreenComply make a FERPA compliance determination for an institution?
No. The service is designed to support the institution's FERPA obligations, but the institution evaluates its own responsibilities and proposed use. Review the agreement and data handling with your privacy and legal teams.
Is student data used for another purpose?
No secondary use is part of the student data posture. Data collected for the exam supports the agreed institutional assessment and human-review process.
Is collection limited to the exam?
Yes. Proctoring collection is limited to the exam window. The institution should explain the enabled checks and their purpose before students begin.
Can an institution choose retention and request deletion?
Yes. Retention is set by the institution under the agreed terms, and deletion is available on request. Students should ask their institution about the policy and requests concerning their own record.
Can we review the data processing agreement and residency?
Yes. A data processing agreement is available, and the posture includes US data residency. Contact our team to review these against your proposed deployment.
Documentation. Context. Human Review.
Bring your review requirements to the conversation.
Discuss the assessment workflow, data handling and documentation your team needs to make an informed decision.