NUADUassessment OS · educator-signedTalk to us →
03

Conduct

— Proportionate integrity.

Match the integrity controls to the stakes. No surveillance theatre.

Assessment integrity is a layered model in NUADU. Lockdown browser and identity verification at exam start are the defaults. Recorded review and additional integrity layers are opt-in, configurable per assessment, and supported by a DPIA template. Integrity signals are surfaces for a named invigilator — not findings about a candidate.

✓Layered, opt-in integrity model
✓Identity verification at exam start (not continuous identification)
✓Anomaly signals reviewed by a named invigilator
✓DPIA template and documentation pack on request
"Integrity proportionate to stakes. Candidate due process intact."
Live · Lockdown browserExponential functions — examClass 2A · 45 min
27:14remaining
KLAKJNPZEWOSBKRDHSMPLGZCDWANFMIJWKMWKSMGPLASJWNKTNEGRWUB
8 submitted
19 in progress
1 not started
HIGH00:52✓ Confirmed · logged
Second face in frameMarek Wójcik · camera · 4 s
[ the problem ]

Assessment integrity has a credibility problem on both sides.

Institutions need credible results. They need confidence that the candidate is who they say they are, that nobody had unauthorised help, and that the result reflects what the candidate actually did. That is a real requirement.

At the same time, heavy-handed proctoring has its own costs. Test anxiety. Accessibility problems. False-positive flags that fall disproportionately on disabled, neurodivergent and non-white candidates. Regulator action against vendors that overreach. A defensible programme matches integrity controls to stakes — not the other way round.

Integrity is real. So is dignity. NUADU is designed around both.

[ how_it_works ]

A layered integrity model. Configurable per assessment.

01
step 1 / 5

Identity verification at exam start

— Identity verification — not identification.

At exam start, the candidate's face is matched once against the photo they enrolled. This is a one-to-one verification step, not continuous identification of a person from a crowd. The match decision is reviewable.

One-to-one verification at exam start
Against the candidate's enrolled photo
Reviewable match decision
Government-ID matching as an opt-in layer
02
step 2 / 5

Browser controls

— Sufficient for most assessments.

Lockdown browser, tab switching detection, copy-paste monitoring, application detection. For most assessments, this layer is sufficient and proportionate.

Lockdown browser (configurable)
Tab and application detection
Copy-paste monitoring
Configurable severity per assessment
03
step 3 / 5

Optional — recorded session review

— Opt-in. Configurable. Documented.

For higher-stakes assessments, sessions can be recorded for human review. Reviewing is done by a named invigilator after the fact. Anomalies are surfaces — not findings. Candidates are not penalised by the system; the institution's academic-integrity process applies.

Recording is opt-in per assessment
Reviewed by a named invigilator
Anomalies are surfaces, not verdicts
Candidate due process intact
04
step 4 / 5

Optional — environmental layers

— Only where stakes justify it.

For the highest-stakes use cases (professional licensing, certification body exams), additional environmental layers can be configured. Each layer is documented, requires a DPIA, and is off by default.

Configurable per assessment
Off by default
DPIA template provided
Documented retention policy
05
step 5 / 5

Integrity signals — for human review

— Signals, not verdicts.

Where integrity layers are enabled, the system produces signals: a tab switch, an identity-mismatch flag, an unusual pattern. Signals go to a named invigilator. The institution's academic-integrity process decides. The system does not penalise candidates.

Signals are surfaces for human review
Named invigilator reviews
Candidate appeals process applies
Full audit trail per session
[ capabilities ]

Integrity capabilities, configurable per assessment.

👤cap.01

Identity verification at exam start

One-to-one match against the candidate's enrolled photo. Reviewable. Not continuous identification.

🔒cap.02

Lockdown browser

Browser controls including tab detection, application detection and copy-paste monitoring.

📹cap.03

Recorded review (opt-in)

Session recording for invigilator review after the fact. Configurable, off by default for low-stakes use.

🚩cap.04

Anomaly signals

Signals are surfaces for human review. The named invigilator decides. The candidate's appeals process applies.

♿cap.05

Accessibility-first

Keyboard navigation and screen-reader labelling on interactive controls. Extra-time accommodations applied automatically without re-verification overhead.

📋cap.06

DPIA support

DPIA template, data-flow diagrams, retention policy and sub-processor list for institutional review.

[ use_cases ]

Integrity controls matched to stakes.

case.01

A classroom quiz

Lockdown browser and basic tab-switch detection. No cameras. No recording. Proportionate to the stakes. Educators see a clean signal if anything unusual happens, and decide how to handle it.

  • Browser controls only
  • No cameras, no recording
  • Proportionate to formative use
case.02

A university final

Identity verification at exam start, browser lockdown, optional session recording for invigilator review on a sample basis. DPIA on file. Candidate appeals process documented.

  • Identity verification at exam start
  • Optional recording
  • Documented appeals process
case.03

A professional certification

Identity verification including optional government-ID matching, lockdown browser, recorded review available, additional environmental layers configurable per the certification body's policy. Documentation pack on request.

  • Identity verification including government-ID (opt-in)
  • Recorded review configurable
  • Documentation pack
case.04

National examination

Identity verification, lockdown browser, recorded review, named invigilator workflows, candidate due process and complete audit trail. Configurable to match the national programme's policy framework.

  • Configurable to programme policy
  • Named invigilator workflows
  • Complete audit trail for candidate due process
[ differentiators ]

Why this is integrity, not surveillance.

01

Proportionate by design

From lockdown browser only (formative use) to recorded review with environmental layers (certification body use). The institution chooses the level that matches the stakes.

02

Identity verification — not identification

One-to-one verification at exam start, against the candidate's enrolled photo. Not continuous identification. Not facial-recognition matching against a database.

03

Signals, not verdicts

The system produces signals; named invigilators review them; the institution's academic-integrity process decides. Candidates are not penalised by the system, and have the appeals process they would in any other integrity case.

04

No inference of emotion or intent

NUADU does not infer attention, stress, engagement, confidence or intent from face, voice, gaze or keystrokes. Anomaly signals are objective events — they do not claim to read what the candidate is thinking.

05

Documented for institutional review

DPIA template, retention policy, sub-processor list, data-flow diagrams. Ready for DPO, works council, candidate appeal and regulator review.

[ faq ]

Questions, answered.

For a new assessment, the defaults are lockdown browser and identity verification at exam start. All other integrity layers are off by default and require an explicit choice per assessment.
No. NUADU does not perform emotion recognition, intent inference, stress detection or attention scoring. Integrity signals are objective events — a tab switch, an identity-mismatch flag, an unusual pattern.
The signal is reviewed by a named invigilator after the fact. The candidate is not penalised by the system. If the institution decides to investigate, the candidate's appeals process applies. Anomaly signals are surfaces — not findings.
Recording is opt-in, configurable per assessment, and supported by a DPIA template and a retention policy. Where recording is used, candidates are informed in advance, the lawful basis is documented, and access controls are in place.
Yes. Browser controls alone are sufficient for many assessments. Identity verification at exam start can be replaced with an alternative identity workflow (proctor in-room, government-ID check by invigilator) where biometric verification is not preferred.

See integrity controls matched to your stakes.

Walk through the layered model with our team — and bring your DPO. We will help you design controls that match the assessment, not the other way round.