DPDP Act 2023 compliant online proctoring for higher education.
Kwilo's proctoring module collects only what exams require, notifies learners of every data use, and deletes session recordings on a schedule you control — not ours.
What the proctoring module collects and why
Kwilo uses the device camera for a one-time face check at exam start — it does not run continuous facial recognition during the exam. Audio and screen activity are recorded only for the exam duration. All recordings are stored in your institution's designated region. A learner-facing consent screen at exam launch itemises every data point collected, its purpose, and its retention period — satisfying DPDP Act Section 6 obligations for explicit, informed consent.
For exam cells, Vice-Principals, and IT administrators
Exam cells need proctoring software that can be deployed without IT installing client software on each learner device. Kwilo runs entirely in the browser. IT administrators configure data residency (India region on GCP or Azure) and deletion schedules in the admin console. Vice-Principals get a per-exam flagging report: number of anomalies detected, type (phone in frame, second person, audio event), and severity. Flagged segments are reviewed by faculty, not acted on automatically.
DPDP obligations covered by Kwilo
Kwilo acts as a data processor under DPDP Act 2023. Your institution is the data fiduciary. The platform provides: (1) a Data Processing Agreement (DPA) ready for institutional signature, (2) configurable 90-day maximum retention with automatic purge, (3) a learner-accessible data log showing what was collected and when it will be deleted, (4) breach notification triggers that alert your designated Data Protection Officer within 72 hours. No proctoring data is used for model training.
Built for accuracy, validated early
Kwilo's proctoring module has been running across our first cohort of college partners, flagging genuinely suspicious behaviour rather than routine fidgeting or lag. Faculty reviewers tell us anomaly reports are quick to confirm, and every flagged segment comes with the recording attached, not just a score.
Request a demo
View pricing
Frequently asked questions
No. Kwilo performs a one-time identity check at exam start, comparing the learner's live photo to their registered ID photo. During the exam, anomaly detection uses motion heuristics and audio events — not facial recognition. This limits the personal data collected and reduces the risk of false positives from lighting changes or glasses.
Recordings are permanently deleted from Kwilo's storage after the retention period you set, up to a maximum of 90 days. The deletion is logged in the audit trail. You can download any recording before it is deleted if you need to retain it for a longer period under your institution's own archival policy.
Yes. Every learner has a data access page (accessible from their profile) showing which exam sessions produced recordings, when each will be deleted, and the anomaly flag status. This satisfies the DPDP Act's right-of-access obligation without requiring manual intervention from your data team.
Kwilo provides a standard DPA for institutional signature that specifies Kwilo as data processor and your institution as data fiduciary. The DPA covers purpose limitation, storage restriction, sub-processor disclosure (GCP or Azure), and breach notification timelines. Your legal team can request a redlined version.
The exam setup flow checks device capability before the exam window opens. Learners whose devices fail the capability check are flagged to the exam administrator before the exam starts — not during it. The exam cell can accommodate those learners with a supervised physical environment as a backup pathway.