Security

Our approach

Data is isolated per account and per institute using database row-level security. Exam answer keys are computed on the server and never sent to the browser. Secrets are kept out of the front-end.

Reporting a vulnerability

If you believe you have found a security issue, email security@proctra.in with details and steps to reproduce. Please give us reasonable time to respond before any public disclosure.

Scope note

This describes our engineering approach. It is not a certification. A formal security review is part of our launch checklist.