Acceptable Use Policy

This policy applies to every account and to anyone acting under one: institutions, their administrators, invigilators, examiners and candidates.

It sits alongside the Terms of Service. Where your institution has its own academic-misconduct or IT policy, that applies to you as well; this one is the floor, not the ceiling.

You must not:

• Attempt to gain access to any account, organisation or data that is not yours, whether or not you succeed.
• Probe, scan or test the vulnerability of the platform without our written permission. Good-faith reports to info@xamina.io are welcome; unauthorised testing against live candidate data is not.
• Interfere with the service — denial of service, flooding, or deliberately degrading performance for others.
• Reverse-engineer, decompile or attempt to derive the source code, except where the law expressly permits it.
• Scrape, harvest or bulk-extract data by any means other than the features and API we provide.
• Use automated agents to create accounts, submit answers or drive the exam runner.
• Circumvent or disable any security, supervision or rate-limiting control.
• Resell, sublicense or provide the platform to a third party unless your agreement with us permits it.

You must not upload, store or transmit content that:

• Infringes anyone’s intellectual property — including exam items copied from another awarding body’s bank.
• Is unlawful, defamatory, harassing, or incites violence or hatred.
• Contains malware, or is designed to damage or gain unauthorised access to any system.
• Contains personal data you have no lawful basis to process.
• Is sexually explicit, or depicts a child in any sexualised way. We report this to the authorities without notice.

We do not routinely review content. Where we are told about a breach, or find one, we may remove the content and suspend the account.

If you are a candidate, this is your section.

While sitting an assessment you must not:

• Get help from another person, or give it. Nobody else may be present unless your organisation has said so.
• Use notes, books, a second device, a phone or any other material that has not been expressly permitted for that paper.
• Photograph, screenshot, film, copy out or otherwise record any part of the paper. Exam items are the awarding body’s property, and publishing them harms every future candidate.
• Have somebody else sit the paper for you, or sit one for somebody else.
• Use another candidate’s credentials, or lend yours.
• Attempt to interfere with the supervision tooling — covering the camera, feeding it a static image, or using virtual camera software.
• Leave the sitting or the camera’s view except as your organisation’s rules allow.

What happens if you do. The platform records signals and shows them to your organisation. It does not decide anything. Your institution reviews the evidence under its own misconduct process, and any consequence — invalidating an attempt, refusing a result, or a wider sanction — is its decision and is appealed to it, not to us.

If you hold or administer an account, you must not:

• Enrol a person without a lawful basis for processing their data, or without telling them.
• Enable supervision without telling candidates in advance what is recorded and why.
• Use identity or supervision data for any purpose other than assessment integrity — never for marketing, staff monitoring or profiling.
• Share administrator credentials, or leave an administrator account active after the person has left.
• Coach candidates on live items you have licensed but do not own, or extract those items to build your own bank.
• Represent a Xamina-issued certificate as endorsed by us, or as carrying accreditation it does not have.

Security issues go to info@xamina.io. Anything else goes to info@xamina.io.

If you are a candidate reporting misconduct by another candidate, tell your organisation — they hold the process and the evidence.

Where we find a breach, we may, proportionately to what happened:

• Ask you to put it right within a stated time.
• Remove or disable the content concerned.
• Suspend an individual account or an entire organisation’s access.
• Terminate the agreement, as set out in the Terms of Service.
• Report the matter to law enforcement or to a regulator.

We act immediately and without notice where the breach presents an ongoing risk to other institutions’ data or to the platform. Otherwise we give notice first. Appeals against an enforcement decision go to info@xamina.io.