Built for the security requirements of high-stakes examinations.
Every examination on SERTUS moves through a defined chain of controls. This is the architecture your security, IT, and examination teams will assess.
Verify identity
Multi-factor verification combining photo capture, credential validation, and optional biometric checks before a candidate is admitted into a session.
Secure environment
Locked-down browser mode, device attestation, controlled peripheral access, and configurable network policies.
Continuous auto-save
Every response persisted in real time with offline-tolerant queues, so a lost connection never means a lost answer.
Encrypted submission
Responses sealed with per-session keys and delivered to institution-controlled storage over authenticated channels.
Digital evaluation
Anonymised scripts, rubric-driven scoring, and moderation workflows keep evaluation defensible and consistent.
Complete audit logs
Immutable event history covering every action, actor, and system decision — available for internal review and regulatory reporting.
A security posture your institution can defend.
Identity & access
SSO through your existing identity provider, role-based access control, delegated administration, and least-privilege defaults across every workspace.
Data protection
Encryption in transit and at rest, key isolation per institution, and configurable data residency for cloud and on-premise deployments.
Deployment models
SERTUS runs in standard cloud, dedicated single-tenant cloud, or on-premise inside your institution — with the same feature parity.
Session integrity
Device attestation, focus-loss detection, session recording, and controlled peripheral access with policies configurable per examination.
Audit & compliance
Immutable audit logs, exportable evidence packages, and integrations with your institution's SIEM and reporting stack.
Business continuity
Multi-region redundancy, tested failover, and offline-tolerant candidate sessions to safeguard high-stakes examination days.
Responsible disclosure
A published disclosure programme, a dedicated security contact, and defined response timelines for verified reports.
Request our security package.
Architecture diagrams, controls documentation, DPA, and reference deployments — available to institutions under review.