Proctored testing means video of real people. Here is how the platform keeps that content, and your own, contained.
Every page, API call, media stream and upload runs over TLS. WebRTC media between participants and the media node is encrypted with DTLS-SRTP.
Each customer deployment has its own media nodes, storage and databases. Uploaded videos are served only to participants of their test, from that deployment.
Webcam snapshots used for engagement scoring are analysed and discarded. Only the resulting numbers, an in-frame flag and a timestamp are stored.
Admins run tests. Moderators, co-hosts and observers get links scoped to one room, and observers must be on the invited list. Participants can only ever see their own session.
Console sessions are signed tokens with a 12-hour life. Opening Monet Live™ from the console uses a one-time, two-minute ticket rather than a second password.
Tests, recordings and participant data are deleted on your instruction or at the end of the plan's retention period. Deleting a test removes its video and posters from the media node.
The privacy policy describes the roles (customer as controller, Monet as processor), the data categories and the retention periods. A data-processing agreement, a sub-processor list and a security questionnaire are available on request for Professional and Enterprise customers.
Send us your questionnaire; most take under a week.