Security
Examination data security and chain of custody
AutogradeX protects examination data with multi-factor sign-in, strict separation of duties, a tamper-evident chain of custody from the sealed bundle to the result, and storage in the institution's own cloud account. Every access to a script is checked against the user's role and allocation.
Updated
Who can see an answer book?
Only the people whose role needs it, and only the scripts allocated to them. Access is checked on every request, not only when the page loads.
| Role | Can access |
|---|---|
| Administrator | Users, credential resets and oversight |
| Coordinator | Exam cycles, marking schemes, allocation, AI runs and reports |
| Hub supervisor and scanner | Receiving, custody, scanning and quality control; never marks |
| Capture operator | Scanning at an approved station; never marks |
| Evaluator | Only allocated scripts, without student identity |
| Moderator | Only scripts with a moderation case |
How does AutogradeX prove nothing was tampered with?
Every event, from the seal check on a bundle to each scan, quality decision and restored page, is written to an append-only ledger. Each entry's SHA-256 hash covers the previous entry, so changing or deleting any record breaks the chain, and one click re-verifies the whole ledger.
How are accounts protected?
Every account signs in with a password and an authenticator app.
- Authenticator-app codes (TOTP), enrolled by QR code.
- Account lockout and rate limiting against password guessing.
- Strong password rules, and an optional forced change after an administrator resets a password.
- Secure, HTTPS-only session cookies, HSTS and a strict content security policy.
Where is examination data stored?
In services the institution controls. Records live in its PostgreSQL database, page images in its private Google Cloud Storage or S3-compatible bucket, and AI processing in its own Azure subscription. Page images are served only through the signed-in application. AutogradeX runs on campus servers or on Google Cloud, Azure or AWS container services.
Frequently asked questions
Can evaluators see which student or college wrote an answer book?
Evaluators work from an anonymised student code. The roll number and exam centre recorded when the cover is checked at scanning are not shown to them.
Is data shared with AI providers for training?
AI runs on deployments in the institution's own Azure subscription. Whether data is retained or used is governed by the institution's agreement for those services, not by AutogradeX.
Related
- On-screen markingAutogradeX is an on-screen marking system for university answer books: scanned scripts, annotations, double evaluation, moderation and result export.Read
- ScanningScan bound answer booklets at the exam centre or hub with a phone, a USB document camera or an overhead scanner, without cutting the spine.Read
- AI evaluationAutogradeX reads handwritten answers with OCR, has several AI models mark them against your rubric, and leaves every final mark to an evaluator.Read
See AutogradeX on your own answer booklets