Choose the safeguards
Enable session recording, screen sharing, or the one-device limit to match the stakes of the exam.
Info@ninecode.vn
Exam security and proctoringChoose the safeguards that fit
Choose the safeguards that fit
each exam you run
Turn on Session Recording to keep a replay of choices and actions inside NineQuiz. If you also need evidence when a candidate opens another tab, window, or app, require screen sharing so NineQuiz can capture those moments for later review. Screen sharing is available on desktop only.
✓Session recording✓Screen sharing✓Desktop only✓One-device limit
Proctored attempt · ActiveAlex Morgan
Program entrance assessment
18 of 30 questions
18
Which option best fits the situation described?
●Switched to another tab
The exam window was out of focus for 18 seconds
09:12Three independent controls
Turn on only what this exam actually needs
You choose each safeguard in the exam settings. NineQuiz collects the data associated with the options you enable, rather than applying the same level of monitoring to every quiz.
Security & proctoringNo options enabled
Session recording
Replays answers and actions taken inside the NineQuiz exam interface. It does not record content in other tabs, windows, or applications.
Screen sharing
Candidates share their screen before starting. If they move to another tab, window, or app, NineQuiz can capture the screen for the organizer to review later. Desktop only.
One-device limit
Each candidate can continue the attempt in only one browser or device at a time. Opening another tab in the same browser is still possible.
!
Proctoring starts only after you enable it. Screen sharing requires browser permission and is supported on desktop computers only.
Evidence with context
See what was on screen when a candidate left the exam
When desktop screen sharing is required, NineQuiz can take a screenshot at the moment a candidate opens another tab, window, or application. Each image is tied to the correct attempt and timestamp.
Screenshots captured outside the exam5 images · Grouped by event×
↖
Capture at 09:18:42The screenshot shows what was visible when the candidate moved away from NineQuiz.
A clear process for organizers and candidates
Explain the requirement
If screen sharing is required, tell candidates they need a desktop computer and must grant browser permission before starting.
Collect only configured data
NineQuiz records in-app activity or captures the shared screen only for the features that have been enabled.
Review before deciding
Compare events, screenshots, answers, and your exam policy before drawing a conclusion.
Proctoring supports a review; it does not replace a sound exam process
NineQuiz can observe only the browser and device used for the attempt. It cannot see the entire room, so no remote proctoring tool can guarantee that every form of outside help will be prevented.
!
A flag is not a finding of misconduct
A focus change may be caused by a system dialog, a notification, or an accidental click. On the other hand, a clean event log does not prove that no outside help was used. Treat proctoring data as one source of evidence alongside the exam rules, the submitted work, and a human review.
Situations the system cannot fully control
A second device
Screen sharing covers only the computer used for the exam. A phone, tablet, or second laptop may remain outside the shared screen.
Off-screen help
Printed notes, another person in the room, or spoken help may never appear in a screenshot. This is a basic limitation of at-home testing.
Connectivity or permission loss
An unstable connection, a stopped share, or operating-system restrictions can create gaps. Missing data should not automatically be treated as a violation.
A real event without context
Leaving the page once may be an accident or a system alert. Review the timing, duration, frequency, and surrounding answers before deciding what it means.
Best-fit environment
Use a school computer lab or managed devices for high-stakes exams
Proctoring is most reliable when the organizer controls the device, network, room, and invigilation process. A campus lab or school-issued laptop offers more consistent conditions than a personal device at home.
✓Use school-managed computers with a browser and settings tested in advance
✓Have a teacher or proctor in the room to observe what is outside the screen
✓Ask candidates to put away phones and personal devices before the exam
✓Run a short practice check for the network, account, and screen-sharing permission
✓Publish clear rules, data notices, and a procedure for connectivity problems
Reduce copying through exam design
Draw from a large question bank so attempts are meaningfully different
Proctoring is only one layer. A more durable approach is to make answer sharing and memorizing a small set of questions less useful.
Build a deep bank
Keep several questions for each learning objective, topic, and difficulty level—not just enough for one exam.
Randomize within defined groups
Specify how many items each attempt draws from every topic and level. Fully random selection can produce uneven exams.
Shuffle questions and choices
Shuffle independent questions and answer options. Preserve order for items tied to the same reading passage or scenario.
Use applied questions
Add realistic cases, changing data, and an appropriate number of challenging items so the exam measures application rather than recall alone.
Set a reasonable time limit
Allow enough time for genuine work without leaving an excessive window for searching or coordinating answers.
Sample setup
Create a 40-question exam from a bank of 150
Each attempt draws 10 foundational questions from a group of 40, 20 applied questions from a group of 70, and 10 advanced questions from a group of 40. Questions and choices are shuffled within each group, producing different but comparable attempts.
150questions in the bank
40questions per attempt
3difficulty groups
Recommended setup by use case
Exam in a school computer lab
Use preconfigured computers, an in-room proctor, stored personal devices, and the safeguards the exam actually needs. Add a large question bank to reduce shoulder surfing.
Exam on school-issued laptops
Run the session in a classroom or testing room with the same browser settings and managed network. Check sharing permission before the start and assist immediately if a device disconnects.
Remote exam from home
Treat proctoring as supporting evidence. Use applied questions, random draws, a reasonable time limit, and—when the decision is high stakes—a follow-up interview or supervised assessment.
Practice or low-stakes checks
You may not need any proctoring. Question and answer shuffling often provides enough variety without adding friction for learners.
Proctor only what is necessary—without filming the room
NineQuiz does not require a webcam and does not record a candidate’s face or physical surroundings. Monitoring focuses on activity inside NineQuiz and, only when the organizer enables it and the candidate grants permission, information visible on the shared desktop screen.
Why NineQuiz does not require a webcam
Room video collects far more personal data without eliminating every way to get help
A webcam may capture a face, bedroom, family members, paperwork, and people who simply walk past. That is far more information than is needed to tell whether someone left the exam interface, while a camera still cannot see every device or source of help outside its frame.
Respect private spaces
Learners do not have to open their home or classroom to continuous video. NineQuiz does not ask for a face view, a view behind the monitor, or a room scan.
Avoid recording bystanders
Roommates, family members, or children may appear on camera even though they are not taking the exam and have received no notice.
Avoid unequal technical barriers
Camera quality, lighting, bandwidth, older devices, disabilities, and living arrangements can make video requirements unfair.
Reduce storage risk
Long video and facial images have a greater impact if misused or exposed. The safest unnecessary data is data that was never collected.
✓If an exam requires direct observation of the room, a supervised testing site with managed devices and an in-person proctor is usually the more appropriate setup.
Every data point should have a clear purpose
NineQuiz provides the controls; the school, employer, or exam owner decides which ones to use. Before enabling monitoring, the organizer should define the purpose, scope, authorized viewers, and retention period.
Collect only what is needed
Do not enable every option simply because it exists. A practice quiz may need only shuffled questions; a high-stakes exam may justify additional safeguards.
Give notice before the attempt
Explain which features are active, what may be recorded, why it is needed, and what happens if permission is not granted.
Keep the purpose narrow
Use proctoring data only to deliver, protect, and review the disclosed exam—not for advertising or unrelated behavior scoring.
Limit access
Only staff with a legitimate role should view the data. Protect accounts and avoid casually downloading or forwarding screenshots.
Set a deletion date
Retain data only for grading, appeals, or a legal requirement, then delete it under the published policy.
Allow questions and explanations
Candidates need a way to ask about data, report an error, and explain an event. A person—not an automated flag—should make the final decision.
When screen sharing is required
A screenshot may include information unrelated to the exam
If a candidate switches to another tab, window, or app, a screenshot may accidentally include an email, message, file name, notification, or other personal information. A generic notice that the exam is “proctored” is not enough.
Before the exam, the notice should explain:
✓Which monitoring options are active and when a screenshot may be taken
✓Why screenshots and event logs are being used
✓Who at the organization is allowed to view them
✓How long they are kept and how a candidate can request access, correction, or deletion
✓What happens if permission is declined, the connection drops, or sharing stops
Children and teen learners
Schools should apply stronger safeguards
When a candidate is a child or minor, clicking “I agree” may not be enough on its own. The school must identify the appropriate legal basis, the role of a parent or guardian, and an explanation suited to the learner’s age.
- Use short, age-appropriate language instead of burying key facts in long terms.
- Notify parents or guardians when the law, school policy, or testing context requires it.
- Do not unfairly penalize a learner whose device cannot meet the requirement or whose family declines unnecessary collection.
- Offer a suitable alternative such as testing at school, using a school device, or in-person supervision.
- Avoid downloading data to personal staff devices and delete it when the educational purpose is complete.
The rules depend on where the organizer and candidates are located
There is no single notice or consent flow that works everywhere. Before enabling proctoring, the organizer should determine its role, lawful basis, and local obligations—especially for mandatory exams and minors.
Applicable privacy and education rules
Check the rules where the exam is deliveredConfirm what notice, lawful basis, access controls, retention, deletion, and appeal process apply. A checkbox alone does not replace a documented privacy process.
GDPR
Lawfulness, transparency, and data minimizationOrganizations need an appropriate lawful basis and must limit purpose, scope, access, and retention. Consent may not be freely given where the school or employer holds more power, and high-risk monitoring may require a data protection impact assessment.
FERPA and COPPA
Education records and children under 13FERPA may restrict access to and redisclosure of education records. Where COPPA applies, a school may authorize collection for a school-approved educational purpose—not unrelated commercial use—and the data should be deleted when it is no longer needed.
Four tasks for the organizer before launch
- Check the law in the relevant location and document the basis for processing.
- Publish an exam-specific privacy notice covering data, purpose, recipients, and retention.
- Define who can review data and how incidents, candidate requests, and appeals are handled.
- Reassess necessity: if a less intrusive measure meets the goal, use it.
iThis is general guidance for a transparent process, not legal advice. High-stakes programs should consult their privacy, legal, or data protection team.
Understand what exam proctoring can—and cannot—show
No. In-app activity is recorded only when the exam owner enables Session Recording.
Clear settings · Evidence you can review
Match the level of security to each exam
Decide whether an exam needs in-app recording, desktop screen sharing, a one-device limit, or a lighter approach.