Online exams for certification bodies and exam centers
Proctored remote exams that leave evidence, from the question draw to the accreditation assessment.
Updated October 1, 2026
How do you move from Forms and Teams to a remote exam you can prove?
With a platform that produces the body's evidence, candidate by candidate. No platform meets ISO/IEC 17024 on its own: the body demonstrates the requirements, and the proctor always decides.
The 2026 edition extends proctoring to remote presence (clause 3.16), requires it in real time unless another method has proven effective (clause 7.4.4) and asks for comparable results (clause 9.3.1). In a certification assessmentCertification assessmentAn assessment whose result determines the award of a title, a degree or a certification. The stakes impose stronger requirements on candidate identification, on the fairness of sitting conditions, on the traceability of grading and on how long completed papers are retained afterwards., each is demonstrated candidate by candidate (see the ISO/IEC 17024 page).
Forms and Teams
- No built-in anti-cheating measures.
- The same questionnaire for everyone.
- Identities checked one by one on a video call.
- No timestamped exam timeline.
Dedicated platform
- Screen exits, copy and paste and a second screen detected.
- A different draw for each candidate.
- A photographed ID, compared by the proctor.
- Every event timestamped on the timeline.
The four stages of a session
Admission
Candidates imported from Excel. A standard browser; on the Organization plan, a webcam and a microphone, plus a computer if the screen is shared.
Identity
Organization plan: photos of the ID document and face, compared by the proctor live or afterward.
Proctored exam
The proctor sees answers and screen exits, messages the candidate, adds time, reopens the exam. Disconnection and reconnection are timestamped in the timeline.
Close
Closed questions graded automatically, written answers with a rubric; AI assigns no grade without a grader.
Four reasons to rethink the remote exam now
At an Italian certification body: the same Forms questionnaire for every candidate and, on assessment day, nothing to show.
Published in March 2026, it extends proctoring to remote presence; at ANAB, self-attestation is due by October 1, 2027, and the transition ends March 31, 2029.
In Italy, from November 1, 2026, Accredia's RG-01-02 rev.04 requires a question bank at least double the exam, webcam and microphone on.
In an exam center, one proctor follows several rooms live. An internet outage costs no answers: they are saved on the candidate's computer and sent automatically when the connection is back, with nothing to switch on.
What Evalmee gives the certification body
Exam proctoring, live and recorded
The proctor follows several rooms from the tracking table. Can the proctor see the candidate's screen? Yes, through event screenshots or a continuous screen video. Every event enters the audit trailAudit trailA timestamped log of every event in a session: sign-in, display of each question, successive answers, network incidents, proctor actions. It is what makes it possible to reconstruct a contested exam and to answer a complaint with something other than memory., timestamped and invisible to the candidate.
- Webcams and microphone recorded for the whole exam (Organization plan)
- A screenshot at each exit, or screen sharing
- Copy and paste and second screen detected
- Messages to one candidate, announcements to all
Candidate identity and question bank
On the Organization plan, the proctor compares the photographed ID document and face. Questions are drawn from a question bankQuestion bankA reservoir of indexed, reusable questions, classified by topic, level or competency. It allows an exam to be assembled by random draw, papers to vary from one session to the next, and the statistical history that makes a question reliable to accumulate, item by item., in a different order for each candidate.
- Identity comparison made by a person
- Biometrics as an option, on quote
- Random draw of the number the body sets
- Content loaded when the exam opens, never before
Evidence and data, ready for the assessment
Grades and papers export to Excel and PDF. Recordings stay reserved for the body's examiners.
- Grades in Excel, question by question
- Graded papers as PDF
- Recordings kept three months by default
- DPA at no extra cost, data hosted in France
What does proctoring detect, and who decides?
On the Organization plan, the platform records webcams and microphone for the whole exam, captures the screen at each event and timestamps it on the timeline. No event closes an exam on its own: the proctor decides.
A screenshot is taken at each window exit, application switch, full-screen exit or suspicious browser extension; copy and paste and a second screen are detected separately. The fraud risk score is deterministic: fixed rules, with no AI and no behavioral analysis, and never a decision.
A signal alerts the proctor, who checks before deciding: this is the live proctoringLive proctoringSupervision by a human proctor who follows candidates in real time during the session and can intervene, ask for a sweep of the room or stop the exam. It is the most expensive mode, and the only one that allows an incident to be dealt with as it happens. of clause 7.4.4, detailed on the online exam proctoring page.
Who does what, from exam to assessment
Recording
Platform
Records events, images and audio, with timestamps.
Decision
Proctor
Reviews the events and decides: a person establishes cheating.
Documentation
Certification body
Documents the decision and keeps the evidence.
Oversight
Accreditation body
Reviews the evidence during its surveillance assessments.
How do you build a question bank large enough for the draw?
Put more questions in the bank than the scheme calls for, drawn in random order. The Italian rule sets the bar at double: 40 questions in the scheme, at least 80 in the bank.
Draw
Set in the Structure menu: one bank per topic, questions of comparable difficulty, the number to draw.
Import
Excel or Moodle XML; Word or PDF through AI-assisted import, to be reread.
Case studies
Open questions, graded with a rubric.
Scope
Banks are added exam by exam; periodic validation of the exams stays with the body.
What evidence is left for your accreditation body's assessment?
For each candidate: identity check, draw received, recordings, screenshots, event timeline, grade and graded paper, from the end of the session.
Grades leave by file or by integration: SSO, LTI 1.3, a public OAuth 2.0 API and an MCP server, detailed on the integrations page.
| Stage of the exam | Evidence produced | Where to find it |
|---|---|---|
| Setup | Proctoring measures, random draw and order | Exam settings, Structure menu |
| Admission | ID and face photos, the proctor's decision | Identity verification tab |
| Exam | Recording of the webcams and microphone | Session recordings |
| Exam | A screenshot at each event, or screen sharing | Candidate's paper |
| Exam | Screen exits, copy and paste, second screen | Exam timeline |
| Exam | Disconnection and reconnection: timestamped in the timeline; reopening by the proctor: logged | Exam timeline and session logs |
| Close | Grades, including question by question | Grades tab, Excel export |
| Close | Graded papers | Grades tab, PDF per candidate or single |
| Every stage | Who did what, and when, among the body's users | Activity log, Organization plan |
How is candidate data handled under the GDPR?
The body is the controller, Evalmee a processor under Article 28 of the GDPR, with a DPA at no extra cost. Data is hosted in France, recordings are deleted after three months by default, and no biometric data is processed outside the option on quote.
Access reserved for examiners, data encrypted in transit and at rest: see the security and GDPR page.
What the GDPR requires, and how the CNIL reads it
Impact assessment
A data protection impact assessmentAnalyse d'impact (AIPD, French data protection impact assessment)Analyse d'impact relative à la protection des données: according to the CNIL, a tool for building a processing operation that complies with the GDPR and respects privacy. It is required for processing operations likely to result in a high risk to the rights and freedoms of the people concerned. when the risk is high (Article 35); Evalmee describes its features, data and subprocessors.
Before the exam
A test on a representative range of hardware, and candidates informed of the features used before they sign in.
Proportionality
The CNIL, France's data protection authority, favors real time without retention unless fraud is suspected (a 2023 recommendation, not binding outside France, that Evalmee applies by default); recording the whole exam is justified with the data protection officer (DPO).
Biometrics
Article 9 of the GDPR: the proctor compares identity; the automated verification option requires an exception such as explicit consent.
Risk score
The body weighs its use with its DPO, given Article 22 of the GDPR.
Retention
Set before deployment; the retention periodData retention periodThe length of time personal data may remain in an active database. The CNIL points out that it is determined by the purpose of the processing: at the end of that period the data must be deleted, anonymized or archived, which bears directly on remote proctoring recordings. for recordings is fixed by contract.
What stays with the certification body?
Evalmee is not ISO/IEC 17024 certified and could not be: the standard applies to the body.
Evalmee provides
- Live proctoring and recordings (Organization plan).
- Identity checks (Organization plan) and random draw.
- Timestamped events, grades and papers.
The body keeps
- The scheme and the exam procedure.
- The decision: the proctor decides, the platform documents.
- The session file.
What Evalmee changes for a certification body
A draw for each candidate, with no manual work.
Decisions based on timestamped events.
Evidence ready on the day of the assessment.
Hosting, DPA and retention in writing for the DPO.
Frequently asked questions
No, and no platform can on its own: ISO/IEC 17024 applies to the certification body, which its accreditation body accredits and assesses. Evalmee helps the body meet clause 7.4.4: timestamped events on every plan and, on the Organization plan, live video proctoring with webcams and microphone recorded throughout the exam. The proctor decides, the platform documents.
No. The exam takes place in a standard browser; the desktop app for Mac and Windows is optional. When event-triggered screenshots (Pro, Max and Organization plans) or screen video are switched on, the exam is limited to computers.
Yes. SSO supports Google Sign-in, Microsoft 365 and Azure AD, CAS and OneLogin, and sign-in can be restricted to the body's domain names. It is set up with our team and is part of the Organization plan, on quote.
Screenshots and video proctoring recordings (Organization plan: webcams, microphone and screen sharing) are deleted after three months by default; a different period can be set by contract.
Yes. For each candidate, the proctor sees the status, the questions answered and the screen exits, can chat with them or send an announcement to all, and finds every event on the timeline with its timestamp. How many candidates one person can proctor effectively is set by the body's procedure.
They keep working: their answers are saved on their computer and sent automatically when the connection is back, with nothing to switch on. The disconnection and reconnection are timestamped in the timeline, and the proctor's reopening of the exam is logged. What follows a disconnection, up to invalidating the exam, is decided by the body's procedure.
Let's check your scheme's requirements together
A demo, clause by clause, of what the platform covers.