Last updated: May 2026
1. Introduction
Safe Exam Support (SES) is committed to protecting privacy and handling personal data responsibly. This Privacy Policy explains how SES processes data when institutions use our services, website, and exam-related platform components.
2. Our Privacy Approach
SES is designed to minimize data processing. As a rule, we do not store student or teacher personal data on our servers. SES primarily acts as a session, configuration, and service integration layer between institutional systems, Safe Exam Browser workflows, and related exam services.
3. Data We May Process
Depending on the deployment model and enabled services, SES may process limited technical and operational data such as:
– exam session identifiers
– browser or configuration validation data
– service logs and diagnostic events
– timestamps and status information
– system health and monitoring metrics
– administrator account data required to manage the platform
SES is not intended to be the primary storage location for student records, teacher records, or institutional identity data.
4. Student and Teacher Data
SES does not intentionally store student or teacher personal data on its own servers. User identity and academic records remain under the control of the institution’s LMS, identity provider, and related systems.
If an institution chooses to integrate SES with external systems, any personal data exchanged is limited to what is technically necessary for secure exam delivery and session handling.
5. Self-Hosted and Cloud Deployments
SES can be deployed in two ways:
– Self-hosted: the institution operates SES on its own infrastructure and remains fully in control of hosting, storage, access, and retention.
– Cloud-hosted: SES is operated by us using a European hosting provider. In this setup, service infrastructure and technical operations remain within Europe.
6. Purposes of Processing
Where processing takes place, SES processes data only for legitimate operational purposes, including:
– delivering and securing exam sessions
– generating and validating exam configurations
– maintaining platform stability, security, and availability
– troubleshooting incidents and preventing misuse
– supporting integrations with institutional systems
7. Legal Basis
Where GDPR applies, processing is typically based on one or more of the following legal grounds:
– performance of a contract
– legitimate interests in securing and operating the platform
– compliance with legal obligations
– consent, where specifically required
Institutions remain responsible for determining the correct legal basis for their own connected systems and educational processes.
8. Retention
SES follows a data minimization approach. Technical logs and operational data are retained only for as long as necessary to provide the service, maintain security, diagnose issues, or comply with legal obligations.
Self-hosted customers define their own retention policies. Cloud-hosted customers may request additional details about applicable retention periods.
9. Security Measures
We use appropriate technical and organizational measures to protect the platform, including secure infrastructure practices, access controls, audit capabilities, and security-focused system configuration.
10. Data Sharing
SES does not sell personal data. Data may only be shared with trusted infrastructure or service providers where necessary to deliver the service, maintain security, or comply with the law.
11. International Transfers
Our cloud-hosted services are operated through a European hosting provider. If any international data transfer becomes necessary, appropriate safeguards will be applied in accordance with applicable law.
12. Data Subject Rights
Where applicable, data subjects may have rights relating to access, correction, deletion, restriction, objection, portability, and complaint to a supervisory authority.
Because SES does not serve as the primary system of record for student or teacher data, requests may need to be directed first to the relevant educational institution.
13. Contact
For privacy-related questions or requests, contact:
hello@safeexamsupport.eu
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal, operational, or product changes. The latest version will always be published on our website.