Online proctoring software, GDPR-compliant
Detected events, a risk score, integrity reports, and an examiner who decides.
Updated October 1, 2026
What is proctoring?
Proctoring means supervising, at a distance, a person taking an exam online. Evalmee does it in two ways: computer monitoring, browser and screen, and video proctoring, webcams and microphone.
It is also called remote proctoringRemote proctoringThe set of arrangements that make it possible to supervise a candidate sitting outside an exam center: video and audio capture, screen sharing, detection of atypical behavior. The level chosen must stay proportionate to the stakes of the exam and to the data it leads you to collect.. Video proctoring is done live (live proctoringLive proctoringSupervision by a human proctor who follows candidates in real time during the session and can intervene, ask for a sweep of the room or stop the exam. It is the most expensive mode, and the only one that allows an incident to be dealt with as it happens.) or after the exam (record-and-review proctoringRecord-and-review proctoringRecording of the session, reviewed afterwards by an examiner, usually guided by the moments that automated analysis has flagged. It costs less than live supervision and leaves a verifiable trace, but it allows no intervention at all while the exam is being sat.), and the optional AI analysis makes it automated proctoringAutomated proctoringSupervision carried out by algorithms that analyze the video feed, the sound and the activity on the device in order to flag atypical events: face absent, second person present, window switched. The flags produced are leads to be investigated, never proof of cheating in themselves. The automation lies in the analysis, never in the decision: drawing a consequence from a flag without a person having examined it would be a fully automated decision, governed by article 22 of the GDPR..
Monitoring an online exam
Computer monitoring
- Browser
- Screen
In the exam page:
- Leaving full screen
- Switching to another window or app
- Copy and paste
- Suspicious browser extension
On the shared screen:
- Second screen
- Screenshot at each event
- Continuous screen video, as an option
Automatic, with fixed rules, no AI
Video proctoring
- Webcams
- Microphone
Live
A proctor follows the exam and can step in.
Record and review
The session is recorded; an examiner reviews it afterwards.
AI-assisted analysisOptional
It flags a second person, an absent face, a phone or a voice.
Timestamped timeline and risk score
Every event goes on the timeline; the score follows fixed rules, no AI.
The examiner decides
Which plan includes what
| Feature | Mini | Pro | Max | Organization |
|---|---|---|---|---|
| Browser monitoring | Included | Included | Included | Included |
| Screen monitoring | Not included | Included | Included | Included |
| Video proctoring, live and record-and-review | Not included | Not included | Not included | Included |
| Identity verification | Not included | Not included | Not included | Included |
| AI-assisted analysis | Not included | Not included | Not included | Optional |
Five facts to know before enabling proctoring
| Question | With Evalmee |
|---|---|
| What is detected | Screen exits and copy and paste in the browser, on every plan; a second screen with screen sharing |
| What is recorded, and when | Pro, Max and Organization plans: a screenshot at each event. Organization plan, with video proctoring: webcams, microphone and screen sharing throughout the exam |
| Who decides | The examiner. The risk score closes no exam and reports no one in their place |
| Retention period | Screenshots (Pro, Max and Organization plans) and video proctoring recordings (Organization plan): three months by default, or another period set by contract on the Organization plan. AI analysis alerts: the retention period of submissions, set by the examining institution |
| Hosting | In France, with Scaleway and AWS France |
What is detected, and how
The exam takes place in a standard browser, with no lockdown browser to impose: Evalmee detects specific events and reports them back to you.
Mandatory full screen
The participant takes the exam in full screen.
Screen exit alert
The participant is warned when leaving the exam screen.
Copy and paste detected
The participant's copy and paste actions are spotted.
Second screen detected
Spotted on the shared screen, from the Pro plan up.
Fraud risk score
Assigned from what has been detected.
Video proctoring
Organization plan: webcams, microphone and screen sharing, followed live or reviewed after the exam.
From an event to a decision
Event detected
Screen exit, copy and paste, second screen.
Timestamped on the timeline
It appears on the timeline of the submission.
Risk score
Deterministic: fixed rules, no AI.
The examiner decides
They review the events and make the call.
What is an integrity report?
The integrity report brings together the events detected during one participant's exam and their fraud risk score. It is reserved for the examiner: the participant never sees it, even with their graded submission.
The fraudExam misconductAny conduct aimed at obtaining a grade that does not reflect the candidate's own work: unauthorized documents, communication with a third party, impersonation, undeclared use of a generative tool. How it is classified and what follows from it are set by the institution's regulations. risk score is deterministic: fixed rules applied to the logged events (screen exits, copy and paste, second screen), with no AI and no behavioral analysis. It is not a verdict: it closes no exam, reports no one on your behalf and constitutes no proof.
When the score is high, the examiner reads a timestamped audit trailAudit trailA timestamped log of every event in a session: sign-in, display of each question, successive answers, network incidents, proctor actions. It is what makes it possible to reconstruct a contested exam and to answer a complaint with something other than memory. in the report and decides personally, as article 22 of the GDPR requires. Based in France, Evalmee also applies by default délibération no. 2023-058 of the CNIL, France's data protection authority, which spells this out in § 38. The examiner is the data controller; Evalmee is the processor.
Screen exits
Count, cumulative duration and duration of the longest one.
Copy and paste and second screen
Every detection, with its timestamp.
Screenshots or screen video
Screenshots on events from the Pro plan up; screen video on the Organization plan.
Timeline
The events of the session, in order, from the participant's submission.
Talking to participants without interrupting the exam
Two channels run in parallel: the chat with you, and the technical support chat with the Evalmee team. A participant blocked by a technical problem does not have to call on you.
One-to-one exchange
The participant contacts you, and you can start it too.
Announcement to everyone
One message broadcast to all participants at once.
Separate technical support
Blocking problems go to the Evalmee team.
Completion notification
An email as soon as a participant finishes, if you enable it.
What does the examiner see during the exam?
The tracking table shows, for each participant, their status, the questions they have answered and their screen exits: count, cumulative duration, longest exit.
Four counters give the overall picture, and the list can be filtered by group and by status.
How does identity verification work?
On the Organization plan, the participant photographs their identity document and their face with their webcam before reaching the exam. The examiner compares the two in a dedicated tab and decides personally: no AI validates a document in their place.
The review is done from the keyboard, one document after another. Identity card, passport or student card are accepted: it is up to you to decide what counts as proof.
Identity verificationCandidate authenticationVerification that the person sitting the exam is the person enrolled: named credentials, sign-in through the institution's directory, checking an identity document, sometimes a biometric comparison. The level of verification is set by the stakes of the exam and by the data it makes it legitimate to process. requires video proctoring to be enabled, and both options must be checked before the session opens.
What exactly is recorded?
On the Pro, Max and Organization plans, browser monitoring takes a screenshot at each event. On the Organization plan, video proctoring also records the webcams, the microphone and screen sharing throughout the exam, and the proctor can follow them live.
Four events trigger a screenshot: leaving the window, using another application, leaving full screen, a suspicious browser extension. Video proctoring, which is more intrusive, is for exams where the stakes justify it.
Recording the screen, as screenshots or as video, restricts the exam to computers; the restriction can be lifted participant by participant.
| Measure | What is captured | When |
|---|---|---|
| Screenshots (Pro, Max and Organization plans) | Screenshots of the participant's screen | At the four events above |
| Video proctoring (Organization plan) | The participant's webcam and microphone | Throughout the exam |
| Screen sharing (Organization plan) | Video of the participant's screen, streamed live and recorded | Throughout the exam |
| Identity verification (Organization plan) | A photo of the identity document and photos of the face | Before access to the exam |
| AI analysis, optional (Organization plan) | Alerts drawn from the webcam and microphone streams, analyzed on Evalmee's servers | During the exam |
Does anything need to be installed to take the exam?
No. The exam takes place in a standard browser; an optional desktop app for Mac and Windows makes the candidate's experience simpler, and the exam can still be taken without it.
The paper is never downloadable in advance: it loads when the exam opens, and the questions do not circulate before the opening time.
No lockdown browser is required. Safe Exam Browser can still be used on the Organization plan, on request, with a configuration file supplied by our team: see the Safe Exam Browser page.
Does this proctoring suit a certification body?
No platform meets the requirements on its own: it logs the events, the proctor decides, the certification body documents. ISO/IEC 17024:2026 requires real-time proctoring unless an alternative method is shown to be effective (clause 7.4.4).
Real-time proctoring means live video proctoring, on the Organization plan. The details are on the certification bodies page and in the ISO/IEC 17024 exam requirements.
The platform logs
Every detected event is timestamped.
The proctor decides
They review the events and make the call.
The body documents
It records the decision and keeps the evidence.
Your accreditation body verifies
It checks that evidence during its assessments.
What Evalmee does not do, deliberately
The Mini, Pro and Max plans have no video proctoring. The Organization plan has it, and its alerts never decide. No plan analyzes emotions or keystroke dynamics.
Mini, Pro and Max plans
- No video proctoring, so no webcam, no facial recognition and no biometric identification.
- Browser monitoring, automatic and without AI.
Organization plan
- Video proctoring, live and record-and-review, with its AI analysis options.
- Gaze direction and head orientation detection is off by default and switched on exam by exam: the CNIL recommendation Evalmee applies advises against it (§ 37).
- AI alerts never decide: a person checks them.
- Webcams and microphone are turned on by the organization, visibly and after prior notice, never by Evalmee on its own initiative.
What actions remain possible during the exam?
You can add time for a participant, close their exam, reopen it, or reset their attempt and their grade. The interface shows the new end time before you confirm.
Access arrangements are prepared beforehand: the extra time calculator gives each candidate's extended duration, and the exam clock projects the finish time of every group in the room.
What happens to the recordings, and who can see them?
Screenshots and video proctoring recordings (Organization plan) are deleted by default after three months, the time needed to handle appeals, unless another period is set by contract on the Organization plan. AI analysis alerts follow the retention period of submissions, set by the examining institution, and are deleted along with them.
Restricted access
To examiners of the client organization; access can be logged.
No external distribution
Prohibited, except under legal obligation; your organization can download the recordings for its archives.
Evalmee does not access them
Beyond technical necessity.
In France, encrypted
Hosted with Scaleway and AWS France; TLS 1.2 or 1.3 in transit, sensitive data encrypted with AES-256 or hashed at rest.
Frequently asked questions
Proctoring is the remote supervision of a candidate taking an exam online. Evalmee does it in two ways: browser monitoring, on every plan, detects specific events in the exam page; video proctoring, on the Organization plan, uses webcams, microphone and screen sharing, live or recorded for later review. Both feed a risk score, and the examiner decides.
Yes, within limits the GDPR sets. The measures must stay proportionate to what is at stake in the exam and collect no more data than that justifies (article 5), candidates must be informed beforehand (article 13), and no decision with a significant effect on a candidate may be taken by a machine alone (article 22). A proctoring system usually calls for a data protection impact assessment (article 35). Evalmee is designed within that framework: the examiner alone decides.
On every plan, screen exits and copy and paste. On the Pro, Max and Organization plans, the screen is monitored: the presence of a second screen, and a screenshot on four events: leaving the window, using another application, leaving full screen mode, and the detection of a suspicious browser extension. On the Organization plan, video proctoring adds screen sharing as continuous video, and an AI analysis of the webcam and sound, optional and off by default, can flag a second person, an absent face, a phone or a voice.
Yes. The events detected during the exam and the resulting risk score are consulted in the integrity reports, which are reserved for the examiner. The score is not a verdict: it closes no exam and does not replace the examiner's decision.
No. The exam takes place in a standard browser. A desktop app is available for Mac and Windows: it is optional, it makes the candidate's experience simpler, and the exam can still be taken without it. If the internet connection drops during the exam, the candidate keeps working: their answers are saved on their computer and sent automatically when the connection is back, with nothing to switch on.
Yes, on the Organization plan and on request: the Evalmee team supplies the configuration file to use. Evalmee does not require it for all that. By default the exam takes place in a standard browser, with an optional desktop app for Mac and Windows that is easier to use and to deploy than a lockdown browser; event detection and the risk score work without locking down the machine.
No. The paper is not downloadable in advance: it is loaded at the moment the participant opens the exam, so the questions do not circulate before the opening time.
It belongs to the Organization plan. The participant photographs their identity document and their face with their webcam. The examiner then compares the two and confirms personally: no facial recognition or biometric identification is involved, the comparison is made by a human. Automated identity verification can also be deployed on a quote basis, limited to establishing the candidate's identity and never used to monitor the exam itself. The Mini, Pro and Max plans use no webcam and include no identity verification.
Screenshots (Pro, Max and Organization plans) and video proctoring recordings, specific to the Organization plan (webcams, microphone and screen sharing), are deleted by default after three months; on the Organization plan, a different duration can be set contractually. AI analysis alerts follow the retention period of submissions, set by the examining institution, and are deleted along with them.
Used by
- Exam centers
- Certification bodies
- Universities
- Business and engineering schools