Your data is safe

• ✓Notice and consent — A mandatory privacy notice and consent box before the test; institutions can use their own text.
• ✓Personal-data separation — Name and contact are visible only to the authorized institution admin; anonymous participants never see them.
• ✓Server-side authorization — Data access is enforced at the database level; it cannot be bypassed from the client.
• ✓Multi-tenant isolation — Each institution’s data is isolated; one institution cannot see another’s data.
• ✓Bot and abuse protection — Protection against automated requests and scraping; cryptographic one-time invite links.

Reach out with any questions. We clarify data-processing details together, based on your institution’s needs.