Secure Exam Proctor Chrome extension security report

Proctorio is a tool created for accessibility. It enables you to take exams remotely while protecting the value of your online degree/certifications and helps to prevent financial aid fraud. Here are some important things to keep in mind when using Proctorio on your assessments: 1. No one here will be watching you - Proctorio removes human bias by using an automated system to level the playing field for you. Any information collected during your assessment is only visible to authorized individuals at your institution—not us. 2. Your information is completely safe - Any information collected during your assessment is encrypted with 256 bit AES encryption before it leaves your computer. Remember that Proctorio works exclusively within the browser and does not have access to your local machine. 3. No personal information is sold - Our privacy design means we can't even see your data. There is nothing for us to sell to third parties. The following permissions may be required by your Chrome browser. In full transparency, here is why we need to use them: READ AND CHANGE ALL YOUR DATA ON THE WEBSITES YOU VISIT - It’s a lot less scary that it sounds… This permission does not mean the extension will read or change anything on the websites you visit. It is triggered by the Chrome tab capture API, that the extension uses to record tabs while inside a test. Tab capture is optionally set by the exam administrators and not forced by Proctorio. This message is also triggered by the <all_urls> declaration which allows the extension to detect the exam. If Proctorio did not ask for this permission, each and every institution would need a different extension or Proctorio would be forced to release permission updates every time a new customer wanted to use Proctorio. Both of those options would make things more complex and increase confusion. FINANCIAL AND PAYMENT INFORMATION - Proctorio does not directly collect financial and payment information from test takers. This permission is only required to allow our third party payment processor to process payment from test takers who are required to pay for their exams. CAPTURE THE CONTENT OF YOUR SCREEN - Some exams require desktop recording. This is set solely by your exam administrator and/or institution. This permission allows Proctorio to capture your screen during an exam—using a technique that intentionally obfuscates sensitive information. Proctorio support can also leverage this to help provide fast & effective technical support. Screen recording cannot be started automatically. Google Chrome offers you another layer of protection by asking you a second time for permission to share your screen. This will happen each and every time the screen share is needed. Google Chrome also places messaging at the bottom of your screen so you always know when it is being captured. You can manually end screen recording at any time. Once an exam is submitted, Proctorio will always automatically end screen capture for you. MANAGE YOUR DOWNLOADS - If your exam administrator has disabled your ability to download files during an exam, Proctorio will use this permission to do that. Proctorio doesn’t monitor your downloads except while inside the exam. Proctorio simply uses this permission to prevent test-takers from downloading items while in an exam. Like all test lockdown settings, this only applies when your exam administrator has enabled it—otherwise, the extension will never manage your downloads. MANAGE YOUR APPS, EXTENSIONS, AND THEMES - Sometimes another app or extension can cause conflicts with Proctorio. This permission allows Proctorio to see what other extensions are installed to look for these possible issues. Proctorio will never install, download or modify your theme. Proctorio uses this permission to automatically enable and disable Chromevox (for ADA test takers when necessary). Lastly, this permission allows the extension to temporarily disable extensions or apps during an exam if the exam administrator has specified that lockdown setting. DISPLAY NOTIFICATIONS - This permission simply allows Proctorio to display important notifications while you’re in an exam. MODIFY DATA YOU COPY AND PASTE - If the exam administrator has disabled your ability to copy and paste during an exam, Proctorio will use this permission to clear your clipboard. Unlike other solutions, Proctorio cannot see the contents of your clipboard. These permissions are only required while you are in a proctored exam and do not affect your ability to copy & paste outside of an exam. IDENTIFY AND EJECT STORAGE DEVICES - Don’t worry. We won’t eject any of your storage devices. This permission allows Proctorio to look at your computer resources to determine whether your computer meets the system requirements. If you encounter a problem before or during an exam, this information can help us better assist you. CHANGE YOUR PRIVACY-RELATED SETTINGS - Again, this is a lot less scary than it sounds. Within your Chrome browser, you can disable 3rd party cookies under your privacy settings. Proctorio uses Olark (https://www.olark.com/) to provide proactive chat support so that in the event you experience an issue before entering an exam, we can chat in to help you out. Olark requires (https://www.olark.com/help/cookies) that your 3rd party cookies are enabled which is why we need this permission. --------------------------------------------------------------------------------------------------------------- Single purpose policy: use browser to secure online exams https://proctorio.com/privacy https://proctorio.com/policies https://proctorio.com/privacy/audits https://proctorio.com/privacy/compliance https://proctorio.com/privacy/data-security