Health and Safety Policy

Effective date: March 30, 2026

ProctorEdu Inc. dba OctoProctor ("we," "us," "our," or "OctoProctor") is committed to promoting the health, safety, and well-being of all individuals who use our online proctoring Services. This Health and Safety Policy ("Policy") applies to test takers, Testing Institution staff, and any other users of the OctoProctor platform.

This Policy supplements our Terms of Service, Privacy Notice, and Regional Data Protection Policy, and should be read in conjunction with these documents.

Important notice: This Policy contains general wellness recommendations and safety information drawn from publicly available occupational health guidance. It does not constitute medical advice, diagnosis, or treatment. If you have a medical condition that may be affected by computer use, screen exposure, or examination-related stress, consult your healthcare provider before participating in proctored examinations. Do not delay seeking professional medical advice, or disregard such advice, based on anything in this Policy.

1. Scope and application

Who this Policy applies to

This Policy applies to:

When this Policy applies

This Policy applies during:

Role of OctoProctor

OctoProctor is a technology provider that supplies the proctoring platform and related services. Testing Institutions are solely responsible for all decisions relating to examination administration, including examination content, policies, break schedules, accommodation determinations, and emergency procedures. Nothing in this Policy is intended to create, and shall not be construed as creating, any duty or obligation on the part of OctoProctor with respect to decisions that are within the Testing Institution's control. Where this Policy makes recommendations to Testing Institutions, such recommendations are advisory only and do not transfer responsibility from the Testing Institution to OctoProctor.

2. Physical health and ergonomics

Workstation setup

To minimize physical discomfort during proctored sessions, we recommend following established ergonomic guidelines for computer use, including those published by the​​ https://www.osha.gov/computer-workstations (US), the https://www.hse.gov.uk/msd/dse/ (UK), or the equivalent authority in your jurisdiction. Key considerations include seating and posture, screen positioning, lighting, and equipment placement.Ensure the camera is positioned to capture your face clearly for proctoring purposes without requiring uncomfortable positioning.

Screen time and breaks

For test takers:

OctoProctor recommends that Testing Institutions allow periodic breaks during extended examinations, consistent with applicable occupational health guidance for prolonged screen use.

Important note: Break policies are determined by Testing Institutions. Contact your Testing Institution regarding specific break allowances for your examination.

For administrators and support staff:

We recommend following standard occupational health guidelines for computer work, or applicable national guidance where no employer policy exists.

Vision and eye health

Prolonged screen use may cause eye fatigue, discomfort, dry eyes, blurred vision, or headaches. To reduce the risk of screen-related eye strain, follow the display screen and lighting recommendations published by the ergonomic authorities referenced above.Consult an eye care professional if you experience persistent eye pain, sudden changes in vision, persistent headaches after screen use, or symptoms that do not improve with rest.

Audio and hearing protection

OctoProctor may use microphone and audio monitoring during proctored sessions. Test audio levels before examinations and keep volume at comfortable levels, particularly when using headphones. If you experience ringing in the ears, difficulty hearing, or ear pain during or after a session, adjust volume settings immediately and consult a healthcare professional if symptoms persist.

3. Psychological well-being

Test anxiety and stress management

We recognize that proctored examinations can be stressful. While OctoProctor provides the technical platform, your Testing Institution is responsible for examination policies and procedures.

Preparation recommendations:

During examinations:

Support resources:

If you experience significant test anxiety or stress:

For Testing Institutions:

We encourage institutions to:

Privacy and monitoring concerns

We understand that being monitored can feel intrusive. Our commitment to your privacy includes:

Your rights:

Under applicable data protection laws, you have rights regarding your personal data. See our Regional Data Protection Policy for details on how to exercise these rights.

Questions or concerns:

If you have concerns about privacy or monitoring practices:

Special category and sensitive data:

Proctoring services may involve processing of biometric data (such as facial recognition for identity verification), audio and video recordings, and in limited circumstances health-related information (such as if you report a medical incident during a session). Where applicable data protection laws classify such data as special category or sensitive personal data, enhanced protections apply. For details on how we process these categories of data, including our legal bases and safeguards, see our Regional Data Protection Policy.

Accessibility and inclusive design

OctoProctor is committed to ensuring our Services are accessible to all users, including those with disabilities. For comprehensive information about our accessibility features, accommodations, and compliance measures, please visit our Accessibility Statement.

Requesting accommodations:

Biometric data processing

Where identity verification features are enabled, OctoProctor processes facial recognition data to verify test-taker identity. This constitutes biometric data under a range of laws that may impose consent, notice, retention, or registration obligations, including:

Testing Institution obligations:

Before enabling identity verification features, Testing Institutions must:

OctoProctor's role:

OctoProctor processes biometric data solely for identity verification at the Testing Institution's direction. Biometric data is not used for service improvement, analytics, profiling, or algorithm training. Biometric data is retained and deleted in accordance with the retention schedule set out in the Terms of Service and Regional Data Protection Policy, or as otherwise required by applicable biometric data laws.

Enabling identity verification:

OctoProctor will not process biometric data for a Testing Institution's examination sessions until the Testing Institution has confirmed through the platform that it has obtained the consents required by applicable law. Testing Institutions that enable identity verification features represent and warrant that all required consents have been obtained prior to each examination session and agree to provide evidence of such consents to OctoProctor on reasonable request.

5. Environmental safety

Testing environment requirements

Physical space:

For optimal safety and examination integrity:

Electrical safety:

Internet and equipment:

Emergency preparedness:

Emergency procedures during proctored sessions

In case of medical emergency:

In case of fire, natural disaster, or other emergencies:

Technical emergencies:

Testing Institution responsibilities:

Testing Institutions should:

For proctors:

If you observe signs of a medical emergency in a live session (including suspected seizure, loss of consciousness, or other acute distress):

6. Data security and technical safety

Secure data handling

OctoProctor implements comprehensive security measures to protect your data:

Technical safeguards:

OctoProctor implements industry-standard technical security measures, including encryption of data at rest and in transit, role-based access controls with multi-factor authentication, continuous security monitoring and intrusion detection, and hosting on secure cloud infrastructure. For current details on our technical security measures, including encryption standards, infrastructure specifications, and hosting regions, please visit our Trust Center at https://trust.octoproctor.com.

User responsibilities for security

Account security:

Device security:

Network security:

Reporting security concerns

If you suspect a security issue:

7. Children's health and safety

Use by minors

Our Services are not intended for use by individuals under 18 years of age except through a Testing Institution that has assumed responsibility for compliance with applicable children's data protection laws. Specifically, individuals under 13 may use the Services only where the Testing Institution acts as the "operator" under the Children's Online Privacy Protection Act ("COPPA") (as described below) and has obtained all required consents; individuals aged 13 to 17 may use the Services only through a Testing Institution that has obtained any consents required by applicable law. This is consistent with the "Age restrictions and children's data" section of our Terms of Service.

COPPA operator status. For purposes of the Children's Online Privacy Protection Act (15 U.S.C. § 6501 et seq.) and its implementing regulations (16 CFR Part 312), OctoProctor does not collect personal information directly from children under 13. Where a Testing Institution directs OctoProctor to provide Services to children under 13, the Testing Institution is the "operator" under COPPA and assumes all operator obligations, including obtaining verifiable parental consent using a method that satisfies 16 CFR § 312.5. Testing Institutions that are schools or school districts (or acting at the direction of a school for an educational purpose) may rely on the school-authorization doctrine recognized by the Federal Trade Commission in its COPPA enforcement guidance (FTC, Complying with COPPA: Frequently Asked Questions, Section M) in lieu of direct parental consent. All other Testing Institutions must obtain verifiable parental consent directly from the parent or guardian. Testing Institutions acting as COPPA operators must also comply with the revised COPPA Rule finalized by the Federal Trade Commission in January 2025 (effective April 22, 2025), including: (a) adopting and following a written data-retention policy that limits retention of personal information from children under 13 to only as long as reasonably necessary to fulfill the purpose for which it was collected; (b) obtaining separate verifiable parental consent for any disclosure of a child's personal information to a third party that is not reasonably necessary to provide the service; and (c) establishing and maintaining a written information security program with reasonable safeguards for children's personal information. OctoProctor's platform supports Testing Institutions in meeting these requirements, but the underlying obligations remain those of the Testing Institution as operator.

GDPR Article 8. In the EEA, the UK, and Switzerland, processing a child's personal data in connection with information society services requires consent or authorization of the holder of parental responsibility in accordance with Article 8 of the GDPR (or the UK GDPR or Swiss FADP equivalent). The applicable age threshold varies by EU member state (13 to 16 years). Testing Institutions are responsible for determining the applicable threshold and obtaining consent accordingly.

Biometric data and minors

In addition to the requirements in the "Biometric data processing" section above, where identity verification is enabled for examinations involving minors:

Additional protections for minors

For individuals under 18 using OctoProctor:

Parental/guardian involvement:

Enhanced safety measures:

Reporting concerns:

If you are a parent or guardian with concerns about your child's use of OctoProctor:

8. Incident reporting and response

Types of reportable incidents

We encourage reporting of:

Health and safety incidents:

Technical safety incidents:

Environmental incidents:

How to report incidents

For test takers:

For Testing Institutions:

What to include in reports:

Our response procedures

When incidents are reported, we will:

For serious incidents:

9. Training and awareness

For test takers

We recommend that test takers:

Resources:

Test takers are encouraged to consult the following materials to prepare for a safe and smooth examination experience:

For Testing Institutions

We recommend that Testing Institutions:

OctoProctor support:

We provide:

Regulatory compliance

Applicable regulations

OctoProctor is committed to compliance with relevant health and safety regulations in jurisdictions where we operate. The following is a non-exhaustive list of regulations that may apply depending on the location of our users and Testing Institutions:

Data protection and privacy:

For data protection and privacy laws applicable to processing in connection with the Services, see our Regional Data Protection Policy. Specific statutes referenced substantively in this Policy (including COPPA, GDPR Article 8, and applicable biometric information privacy laws) are addressed in the relevant sections above.

Accessibility:

Occupational health and safety:

Children's safety:

Standards and frameworks

OctoProctor's security and accessibility practices are informed by recognized industry frameworks, including ISO 27001 (Information Security Management), SOC 2 (Security, Availability, and Confidentiality), and WCAG 2.1 Level AA (Web accessibility). For current details on our security measures and practices, visit our Trust Center at https://trust.octoproctor.com.

Regional considerations

Health and safety frameworks that inform the recommendations in this Policy vary by jurisdiction. Frameworks considered in the development of this Policy include:

11. Continuous improvement

Policy review and updates

This Health and Safety Policy is reviewed:

Notification of changes:

Material changes to this Policy will be communicated through:

Feedback and suggestions

We welcome feedback on health and safety matters by email: info@octoproctor.com with subject line: "Health and Safety Feedback". Please include specific suggestions for improvement

What we do with feedback:

12. Roles and responsibilities

OctoProctor's responsibilities

As the service provider, OctoProctor is responsible for:

Testing Institution responsibilities

Testing Institutions are responsible for:

Test-taker responsibilities

Test takers are responsible for:

Parent/guardian responsibilities

When minors use OctoProctor, parents or guardians are responsible for:

13. Limitation of liability

General disclaimer

While we strive to promote health and safety, OctoProctor cannot guarantee that use of our Services will be free from all risks. Users assume responsibility for their own health and safety when using the Services, including ensuring a safe testing equipment and environment.

The health and safety information and recommendations in this Policy are provided for general informational and guidance purposes only, without warranties of any kind. This information does not constitute medical advice, diagnosis, or treatment. Users should consult qualified healthcare professionals for any medical concerns, follow their physician's recommendations, seek immediate medical attention for emergencies, and not rely solely on this Policy for medical decisions. We do not warrant that following these guidelines will prevent all injuries, health issues, or adverse events.

Scope of liability

To the fullest extent permitted by applicable law, our liability related to health and safety matters is subject to the limitations set forth in our Terms of Service, including:

  • We are not liable for indirect, consequential, or incidental damages
  • Our total liability is limited as specified in the Terms of Service
  • We are not liable for events beyond our reasonable control
  • Users are responsible for their own equipment, workspace, and environment

Non-excludable liability

Nothing in this Policy excludes or limits our liability for:

For jurisdiction-specific rights and protections, including under the GDPR, UK GDPR, and applicable consumer protection laws, see our https://octoproctor.com/policies/regional-data-protection.

14. Contact information and support

General health and safety inquiries

ProctorEdu Inc.
Email: legal@octoproctor.com
Address: 111 Pier Ave STE 100, Hermosa Beach, CA 90254, United States

Technical support

Email: support@octoproctor.com
Available to Testing Institution representatives only for assistance with platform-related health and safety concerns

Regulatory and compliance contacts

For questions about our compliance with specific regulations:

15. Related policies and documents

In case of conflict between this Policy and any other OctoProctor policy or the Terms of Service, this Policy shall prevail to the extent the conflict relates to user health and safety matters - except that where the conflict also involves the processing of personal data, the Regional Data Protection Policy's conflict resolution provision shall apply. For all other matters, the order-of-precedence clause in the Terms of Service governs. Where the applicable prevailing policy cannot be determined under the foregoing rules, OctoProctor shall determine in good faith which provision governs, provided that such determination shall not reduce the user's rights under applicable mandatory consumer protection or data protection law.

16. Acknowledgment

Test-taker acknowledgment

By using OctoProctor Services, you acknowledge that:

This Policy forms part of, and is incorporated by reference into, our Terms of Service. Your use of OctoProctor Services is governed by the Terms of Service together with this Policy and the other policies listed in Section 15. In case of conflict between this Policy and the Terms of Service on matters of user health and safety, this Policy prevails to the extent of the conflict, subject to the conflict-resolution rules in the Terms of Service and in Section 15 above.

Testing Institutions obligations

Testing Institutions are required to ensure that test-takers are adequately informed of health and safety matters before using OctoProctor Services. In particular, Testing Institutions must:

Record-keeping. The Testing Institution is responsible for maintaining records sufficient to demonstrate compliance with this section. OctoProctor may request evidence of compliance in connection with audits, incident investigations, or regulatory inquiries.

Consequences of non-compliance

If OctoProctor becomes aware that a Testing Institution has failed to comply with its obligations under this section, OctoProctor may, pursuant to the Terms of Service and at its discretion and upon reasonable notice:

  • Require the Testing Institution to remediate the non-compliance within a specified period
  • Suspend the Testing Institution's access to the Services until compliance is demonstrated
  • Terminate the Testing Institution's agreement in accordance with the Terms of Service

These remedies are in addition to, and do not limit, any other rights or remedies available to OctoProctor under the Terms of Service or applicable law.

Questions or alternative arrangements

For Testing Institutions: Contact your OctoProctor account representative or email support@octoproctor.com for guidance on meeting the disclosure obligations in this section.

For Test Takers: If you have questions or concerns about these health and safety guidelines, or if you have not received the disclosures described above from your Testing Institution, please contact your Testing Institution to discuss alternative arrangements.