Recordings never leave
A recording is not handed to the examiner as a file; it is streamed from the server. For as long as their time runs, examiners can listen as often as they like and rewind as often as they like, but they cannot download it or pass it on. The moment you email a recording you no longer know how many copies exist; in this flow that moment never comes.
Identity fields are never sent to the examiner
The masking happens on the server, not in the browser: identity data never reaches the examiner's screen. Data hidden in a browser can be read; data that was never sent cannot. It is worth adding a line to your exam instructions asking candidates not to identify themselves inside their answers.
Examiners do not hold accounts
Your examiner does not register with the system. They enter through a link that is theirs alone, time-limited, and open only to their own work. Their time starts when they begin the work, not when the link arrives, so opening it a week later costs them nothing.
The legal frame is on record
Before starting, the examiner signs three documents in their own language: a working-relationship agreement, a confidentiality undertaking, and a privacy notice covering their own data. Until these are complete they see no answers. The texts are versioned and a cryptographic digest of the signed text is stored, so it can later be shown who accepted which version in which language.
No candidate is left unmarked
An answer whose time runs out, or that is never completed, returns to the pool and can be assigned to another examiner. The process does not stall when one examiner steps away.
No certificate before the final score
A certificate cannot be produced while human marking is still pending. At the end of the exam the candidate sees a provisional score, clearly marked as not final. Once every part has been scored, you produce and send the certificates of the candidates above your threshold in a single action. The delivery email goes out in the language the candidate used for the exam.
Setup steps
Your examiners work inside the system.
Where it is used
Where it is used
Exams with an essay section
The multiple-choice part is scored automatically, the essay is read by an examiner, and the final score is the sum of the two.
Language exams with spoken answers
The candidate's speech is listened to and scored by an examiner.
Essay and literary competitions
Entries reach the panel without the identity fields.
Certification programmes
The certificate is issued only once every part has been assessed.
Scholarship and application review
Open-ended application texts are shared among several reviewers.
Multi-stage selection
The scoring stage of an evaluation chain. The last stage of a chain →
Worth knowing
Candidates request their certificate on the closing screen of the exam. Writing your exam instructions accordingly saves you requests afterwards.
Trust band & legal framework
Trust band & legal framework
The undertaking signed by the examiner sets out the duties of a role with access to raw answers and recordings: not to download, not to copy, not to screen-record, not to show or play them to third parties, not to keep them on their own device, not to attempt to identify anyone. Candidate identity data is not written into the answer table; it is held separately, with restricted access. The certificate delivery link opens that one certificate and nothing else. Who scored what, and when, is put on record. These are not a compliance guarantee; they are mechanisms that support the controller's decision and put it on record. The controller adds the statement about the assessment process to the privacy notice.