Compliance
Is online proctoring GDPR compliant?
The GDPR limits how proctoring may be used in the EU, so clients must verify their provider. PRUEFSTER processes all data in the EU, with EU-based staff and a German cloud provider (1&1 IONOS).
Talk to usWhat the GDPR means for online proctoring
Online proctoring processes personal data — typically a participant’s name and email address, plus audio, video and screen recordings, depending on the monitoring level the exam provider configures. Under the GDPR that makes the exam-providing institution the data controller: it decides why and how strictly an exam is monitored, and it needs a provider it can defend to its data-protection officer.
That defence rests on a few concrete questions. Where is the data processed, and by whom? Which subprocessors are involved? How long are recordings kept, and who deletes them? How are data-subject requests handled? A provider should be able to answer each of these in writing.
PRUEFSTER’s answers are short: all processing happens within the EU, in German data centres run by 1&1 IONOS; proctors, reviewers and support are EU-based PRUEFSTER employees; retention is set by the institution, which registers, manages and deletes its exams in the system; and data-subject requests are forwarded to the controller. As processor, PRUEFSTER never uses exam data for anything but the exam.
Our GDPR posture
Processed in the EU
All data is processed within the European Union.
German cloud (IONOS)
Hosted with 1&1 IONOS, a German cloud provider.
EU-based staff
Proctors, reviewers and support are PRUEFSTER employees in the EU.
Privacy by design
Our processing is shaped by GDPR principles (Art. 5, 25).
- Certified
- ISO 27001
- Servers and staff
- EU
- Human support
- 24/7
- Aligned processing
- GDPR
Frequently asked questions
Is PRUEFSTER GDPR compliant?
Yes. Our service is built for clients in the EU, processes data within the EU, and follows GDPR principles.
Where is exam data processed and stored?
Within the EU — in data centres in Berlin and Frankfurt, Germany. Optional mailing may involve a subcontractor in the Netherlands.
Who is the data controller?
The exam-providing institute is the controller; PRUEFSTER acts as processor and forwards data-subject requests to the controller.
What data does proctoring process?
Depending on the monitoring configuration chosen by the exam provider: name, email address, audio and video recordings, and screen content — nothing beyond what the configured exam requires.
How long is data stored?
The exam-providing institution sets retention: it registers, manages and deletes its exams in the system. PRUEFSTER does not keep exam data beyond that.
How are participants informed?
Participants see what will be monitored before the exam starts. The legal basis for the exam is defined by the provider as controller; PRUEFSTER forwards any data-subject requests to it.