Security
How your institution's data is protected.
Your data is kept apart from every other institution’s, in the application and with checks in the database. Your content is private until you choose to publish it, admins need a second factor, and every change to an answer or a mark is recorded.
The basics
Four things that protect your data
- Separated by institution
- Every record belongs to one institution. Queries are limited to your institution, and database checks stop key records from being linked across institutions.
- Private by default
- Courses and questions stay private unless you publish them. Uploaded notes and papers are never shared at all.
- Protected sign-in
- Admins must use a second factor. Repeated failed sign-ins lock the account for a while.
- A record you can check
- Every change to an answer, and every change to a mark, is kept in order and can’t be erased.
Details
How it works in practice
- Admin sign-in
- A second factor is required: an authenticator app or an email code.
- Sign-in options
- Email, phone or username with a password, or Google, Microsoft or LinkedIn.
- Failed sign-ins
- Repeated failures lock that account out for a period, for both sign-in and test access codes.
- Rate limits
- Limits on sign-in attempts, bulk operations, exports and credit transactions.
- Record IDs
- Records are identified by random IDs, never by sequential numbers that could be guessed.
- Sharing
- Content reaches another institution only if its owner publishes it and the other institution chooses to adopt it.
- Usage privacy
- Publish a course and you see pooled results only once three or more institutions are teaching it.
- Proctoring consent
- Recorded per session and per kind: activity, camera, microphone.
- Notification consent
- Consent to notifications is logged.
- Housekeeping
- Old sign-in sessions, failed sign-in records and notifications are deleted automatically.
- Hosting
- TestMySkills runs on AWS in Mumbai (ap-south-1). Your data is stored in India.
FAQ
Questions IT teams ask
Can another school see our students or questions?
No. Every query is limited to your institution, and database checks stop key records from being linked across institutions. Content is shared only if you publish it and another institution adopts it.
Who at TestMySkills can see our data?
TestMySkills platform administrators can access institution data to support you. We’ll go through who that is, and when they would, in your demo.
What happens to the notes and papers we upload?
They stay private to your institution. Uploaded material is never published, shared or adopted by anyone else.
Do admins need two-factor sign-in?
Yes. Every admin must use an authenticator app or an email code in addition to their password.
Can a mark be changed without anyone knowing?
No. Every change to a mark is added to its history, with who made it and when.
Where is our data stored?
In India. TestMySkills runs on AWS in Mumbai, and your institution’s data and files are stored there.
Ask us anything about security in your demo.
Book a 30-minute demo. Bring your IT team’s questions.