Online invigilation for exams Identity verification & lockdown Privacy by design

Custom proctoring software development

Appfront builds custom proctoring software for remote exam supervision: identity verification, monitoring of camera, screen and audio, browser lockdown, AI detection of suspicious behaviour with human review, recording as evidence, and clear flag reports. Privacy by design, with data minimisation, short retention periods and a fair proportionality assessment. The proctoring layer integrates with your own examination platform. For universities of applied sciences, universities, examination bodies and certifying organisations that want to administer remote exams reliably.

What is proctoring software?

Proctoring software supervises exams and tests remotely, helping to prevent fraud and allowing candidates to take them at home or at another location of their choosing. The software verifies the candidate's identity, monitors camera, screen and audio, can lock the browser against unauthorised aids, and flags suspicious behaviour, which a human then reviews. Recordings and flag reports serve as evidence whenever there is doubt about the integrity of an assessment.

An important distinction: proctoring focuses on supervision, not on delivering the test itself. The question bank, the examination environment and the processing of grades belong to the examination platform. Our proctoring layer works alongside it and integrates with it, but remains a separate responsibility. If you want the test environment itself built, see our sibling service building examination software.

Because proctoring means observing a candidate's home environment and processing video, audio and behaviour, we build privacy by design and data minimisation in from the architecture onwards. We are upfront about this: remote supervision is intrusive, rightly raises questions, and calls for a rigorous proportionality assessment. You can also read more about our broader approach to bespoke software development and custom software solutions.

Remote supervision

Candidates sit their exams at home or at another location while their camera, screen and audio are monitored. This lets you run reliable assessments without everyone having to be in the same exam hall at once.

Verified identity

Before the assessment begins, the software checks that the right candidate is present, using an identity check and, where necessary, a brief scan of the immediate surroundings. You can be confident the exam is taken by the person who is meant to take it.

Signal, not verdict

AI detection alerts reviewers to noteworthy moments, but a human always makes the decision. Each flag comes with the relevant clip, so a proctor can assess the context before reaching any conclusion.

How we build your proctoring software

We work in clear stages and involve your assessment experts, proctors, and privacy and information security specialists early on. From a thorough review of your examination regulations, target group and risk assessment through to go-live and ongoing management, every step is aimed at software your team understands, trusts and can demonstrably use with care.

1
Discovery & scope

We map out your exam: the form of supervision, permitted aids, target group and the integration with your examination platform. Together we determine which legal basis, which data and which proportionality assessment are required, and what can be left out.

2
Design

We design the architecture, the monitoring model and the authorisation model, with data minimisation and privacy by design as the starting point, plus the approach to recording, retention periods, flag handling and integrations.

3
Build & iteration

We build in short iterations with automated testing, structured logging and monitoring. You see working versions along the way and steer priorities and alignment with your assessment practice.

4
Go-live & management

Controlled go-live with a pilot assessment and a safety net, followed by ongoing management, monitoring and further development as your assessment formats, regulations or risk assessment change.

What proctoring software does in practice

We tailor every application specifically to your examination regulations, target group and risk assessment. Below are the features we most often deliver for institutions that run remote exams with online supervision.

Identity verification

Before the assessment, the software checks that the right candidate is present, through an identity check and, where necessary, a brief scan of the immediate surroundings. The exam starts with the assurance that it is taken by the person who is meant to take it.

Camera and audio monitoring

Candidates' video and audio are monitored during the exam, so notable moments such as leaving the frame, a second person or background noise can be flagged. You decide the level of supervision that suits the examination.

Browser lockdown

During the exam, the software can lock down the examination environment against new tabs, copy and paste actions, screen sharing and other unauthorised tools. Attempts to leave the environment are logged as a signal for the assessor.

AI detection with human review

The software identifies patterns that may indicate irregular behaviour and submits each signal as a flag to a human assessor, together with the relevant clip. The AI helps prioritise; the invigilator decides on the context and the outcome.

Recording and evidence

Sessions can be recorded so that a recording is available as evidence when the integrity of an exam is in question. Recordings are stored encrypted with a short, configurable retention period and are accessible only to those authorised to view them.

Flag reports

For each candidate, the software compiles the signals into a clear flag report showing the clip, timestamp and assessment. On this basis, the responsible assessor or examination board can make a traceable decision about the exam.

Who we build proctoring software for

Online supervision is used by a range of organisations, each with its own examination practice and risk assessment. For each of them we build software that fits their examination regulations, their target group and the integration with their existing examination platform.

Universities of applied sciences

Educational institutions that want to administer tests and partial assessments remotely with reliable supervision, integrated with their existing learning environment. We connect the proctoring layer via LTI and keep the administration within your own frameworks.

Universities

Faculties that run large-scale examinations and need scalable, traceable invigilation with a watertight authorisation model. The software supports remote examinations without the examination board losing control or accountability.

Examination bodies

Organisations that administer examinations on behalf of training providers and industry bodies and must be able to demonstrate invigilation. They need a clear separation per client, short retention periods and clear flag reports as accountability.

Certification bodies

Organisations that issue official certificates or diplomas and must be able to firmly substantiate the integrity of every examination. Recording as evidence, robust logging and traceable flag reports underpin the value of the certificate.

Not yet sure about a large project?

Test your idea first: a working prototype in 1 day

With OneDayBuild, we turn your idea into something tangible in one day for €1,150, so you can see whether further development is worth the investment. Decide to go ahead with the full build? Then we credit the full cost.

Explore OneDayBuild →

Technology and integrations

We build with a modern, maintainable web stack and connect the proctoring layer to your examination or assessment platform and your learning environment. In practice, this means integrations via LTI with a learning environment or examination system, single sign-on via OAuth 2.0 or SAML, and identity verification through your own authentication. Supervision starts and stops around the exam that the examination platform triggers, and we return the flag reports to the responsible assessor. For the learning environment itself, we work on custom LMS software.

Node.js / Python / .NET React / Vue front-end PostgreSQL / SQL database WebRTC media streaming REST and web service integrations LTI (learning environment / exam system) OAuth 2.0 / SAML SSO Browser lockdown AI behaviour detection Role-based access control Audit logging Encryption in transit and at rest Configurable retention periods WCAG 2.1 AA accessibility Automated testing Monitoring and alerting CI/CD pipelines

Why choose Appfront for your proctoring software?

Appfront builds custom software for education and assessment, and always starts with a thorough analysis of your examination regulations, target group and risk assessment. Proctoring software must not only work technically, but must also be fair and proportionate towards the candidate and fit within the framework your team operates in.

We build in privacy by design and data minimisation from the architecture stage, and we write clear documentation so that your own team or a future supplier can understand and manage the software. No black box, but transparent code and clear agreements on authorisation, recording, retention periods, logging, monitoring and administration.

You work with a fixed point of contact who understands both the technology and examination practice. This keeps lines of communication short, prevents misunderstandings and speeds up decisions when choices need to be made during development about supervision, proportionality and how flags are handled.

You may also be interested in our related services: custom exam software development for the assessment environment itself, custom LMS software and our wider custom software work. Do you have questions? Get in touch with us.

  • Custom software for education and assessment
  • Privacy by design and data minimisation as a starting point
  • Fair proportionality assessment and DPIA support
  • AI detection as a tool, with humans always holding final responsibility
  • Integration with your own examination platform via LTI and SSO
  • Accessible interfaces in line with WCAG 2.1 AA
  • Role-based authorisation and comprehensive audit logging
  • Clear documentation your team can read and manage
  • A fixed point of contact, no account managers passed around
  • Ongoing maintenance and further development, with no vendor lock-in

Security and privacy in proctoring software

Proctoring is one of the most privacy-sensitive applications there is: you are looking into a candidate's home environment and processing video, audio and behavioural data. That is why privacy by design is central to what we do, and why we are honest about the objections. Remote supervision can be experienced as intrusive and is not the right choice for every examination. We therefore always advocate a proportionality assessment and often a DPIA, and seriously considering less intrusive alternatives before opting for proctoring.

Where proctoring is appropriate, we build it carefully: a documented legal basis for processing, data minimisation so that only what is strictly necessary is recorded, short and configurable retention periods, authorisation based on role and necessity, and watertight logging of who views which recording. We build in line with the GDPR, with encryption in transit and at rest, and take into account the requirements around automated decision-making: the AI flags, a human decides. We make interfaces accessible in line with WCAG 2.1 level AA and provide a low-threshold route for objections.

Read more about our security approach: information security policy and vulnerability disclosure policy. Discuss your situation without obligation via our contact form.

  • GDPR-compliant data processing and data minimisation
  • Documented legal basis and proportionality assessment
  • Support in drafting a DPIA
  • Encryption in transit (TLS 1.2+) and at rest
  • Short, configurable retention periods for recordings
  • Role-based access and least-privilege principles
  • Watertight audit logging of access to recordings
  • A human decides on every flag; no autonomous judgement by AI
  • Accessible interfaces and a route for objections

Frequently asked questions about proctoring software

Answers to the questions we are asked most often about custom software for online supervision during examinations.

Proctoring software provides remote supervision during an examination or test, to prevent fraud and allow candidates to take part from home or another location of their choosing. The software verifies the candidate's identity, monitors camera, screen and audio, can lock the browser against unauthorised aids, and flags suspicious behaviour, which a human then reviews. Recordings and flag reports serve as evidence if there is doubt about the integrity of the assessment. Proctoring focuses on supervision; administering the test itself is the responsibility of the examination platform.

Exam software delivers and marks the assessment: question banks, the test environment, scoring and grade processing. Proctoring software is the supervision layer around it that checks the exam is taken fairly: identity verification, monitoring of camera, screen and audio, browser lockdown and detection of suspicious behaviour. The two work together but are separate responsibilities. We build the proctoring layer and integrate it with your examination platform. For the assessment environment itself, see our page on building exam software.

Proctoring is privacy-sensitive: you are looking into a candidate's home environment and processing images, audio and behaviour. That is why we build privacy by design and data minimisation in from the architecture onwards. This means a documented lawful basis for processing, recording and retaining only what is strictly necessary, short and configurable retention periods, tight role-based access and robust logging of who views which recording. A proportionality assessment and often a DPIA are part of this; less intrusive alternatives deserve serious consideration before you move to proctoring.

The AI detection flags patterns that may indicate irregular behaviour, such as leaving the frame, a second face, background noise or clicking out of the sitting environment. These signals are explicitly a tool, not a verdict. Each signal is presented as a flag to a human reviewer along with the relevant fragment, so that a person can assess the context and decide. This prevents an automated system from deciding on fraud or an exam result by itself, in line with the GDPR requirements on automated decision-making.

We build bespoke solutions. Invigilation differs by institution: one exam calls for live supervision by an invigilator, another for recording with review afterwards, and the rules on permitted aids vary widely. Custom software is matched to your examination regulations, your student body and your risk assessment, and integrates with your existing examination platform. After an initial consultation we work out together which form of supervision suits you and which functionality matters most, without promising a fixed timeline or price we cannot yet substantiate.

Accessibility and fairness are design requirements, not an afterthought. Detection based on face or sound can wrongly affect candidates with a disability, a busy home situation or a different skin tone, and you must be able to mitigate that. We build interfaces to WCAG 2.1 level AA, provide clear explanation and a practice environment in advance, offer a low-threshold route for objections and allow alternative sitting formats. A human always remains ultimately responsible for assessing a flag.

We integrate the proctoring layer with your exam or assessment platform and your learning environment. In practice this means integrations via LTI with a learning environment or exam system, identity verification through your own authentication or an ID check, and single sign-on via OAuth 2.0 or SAML. Supervision starts and stops around the examination that your exam platform triggers, and we return flag reports to the responsible assessor. For the learning environment itself we also build custom LMS software.

Yes. We regularly take over existing applications, including those built by another party. We review the architecture, integrations, access model, logging, retention periods and security, document the current setup and propose improvements. From then on we can handle changes, integrations and monitoring, or modernise step by step towards a maintainable and demonstrably GDPR-compliant situation.

Ready to build your proctoring software?

Tell us how you run exams and where you run into problems, from identity verification and supervision to recording, retention periods and handling flags. We are happy to help you decide on the right form of supervision, the integration with your examination platform and proportionality towards your candidates. In a no-obligation first conversation you will get a clear picture of what custom software can do for your institution.

Edit content