Honorlock Security and Privacy FAQ

Case Western Reserve University (CWRU) has a formal agreement to provide online proctoring services through Honorlock. The agreement supersedes Honorlock’s general Terms of Service and includes specific legal requirements for the protection of the privacy and security of CWRU student information, including: 

  • A three-month data-retention period (reduced from 12 months);
  • A formal data-sharing agreement for student information in compliance with specific privacy and security restrictions under the federal Family Educational Rights and Privacy Act (FERPA) as well as the European General Data Protection Regulation (GDPR);
  • A limitation on Honorlock (per FERPA standards) to only collect, process, and store student data for contracted services by faculty members, and a requirement that this information cannot be sold or transferred for any other purpose. This restricts access to our student data to only those within Honorlock with an authorized reason to process or view this data;
  • A restriction on storage of our student data to only data centers located in the United States, and requiring encryption in the transmission of any protected university data;
  • The use of appropriate administrative, technical, and physical security measures to preserve the confidentiality, integrity, and availability of all protected student data;
  • The implementation of data-minimization procedures to delete collected information when no longer necessary or upon termination of the agreement; and
  • The creation of procedures to alert the university upon the confirmation of any data breach of the Honorlock system.

Honorlock is a cloud-based proctoring solution, which has successfully completed the Service Organization Control (SOC) 2 Type 1 audit, US Privacy Shield compliance, and General Data Protection Regulation (GDPR) readiness. The audit affirms that Honorlock’s information security practices, policies, procedures, and operations meet the SOC 2 standards for security, availability, and confidentiality.

See Honorlock’s Student Privacy Statement for additional information on Honorlock’s privacy policies.


Frequently Asked Questions

Proctored testing enables the university to ensure the academic integrity of assessments and to comply with federal regulations that require universities offering online and distance education to verify student identity. Traditional face-to-face classes that aren't conducive to testing in the classroom typically rely on testing facilities for live, in-person proctoring of exams.

During the social distancing of COVID-19 and the closure of testing facilities throughout the world, online proctoring offers an alternative to in-person proctored testing. This is a common practice of online and distance learning courses and is used by many colleges and universities. Though instructors may use a variety of alternate assessment strategies, they may also rely on online proctoring to ensure the security of tests offered to students in different locations. Online proctoring helps prevent academic integrity violations such as:

  • Use of a false identity,
  • Unauthorized collaboration,
  • Use of unauthorized materials, and
  • Copying or distributing test items to others.
     

No. Your instructor may use a variety of assessment strategies that don't include online proctoring. When the nature of the course or instruction makes online proctoring a necessity, however, your instructor may choose to use Honorlock to ensure the academic integrity of your test.

Being displaced during the COVID-19 social distancing period may put you in a situation in which online proctored testing is difficult or impossible. Depending on your living situation, you may not have access to reliable internet, computer hardware, or a private space where you can test uninterrupted. We recommend that you communicate any limitations or obstacles you have with online proctored testing to your instructors so they can work with you. 

No. The university's agreement with Honorlock for online test proctoring does not allow Honorlock to sell student information to third parties. As mentioned above, our contract with Honorlock has specific legal requirements for the protection of student information that supersede Honorlock's standard Terms of Service and bind Honorlock to all of the protections supplied by FERPA (the Family Educational Rights and Privacy Act).

No. Honorlock does not scan home networks or monitor data from any device on the network other than the one used for testing. Secondary devices, such as phones, can be detected, but this is not accomplished by network snooping. See the questions below for more detailed information on how Honorlock tracks and monitors data and devices.

Honorlock uses an encrypted and secured connection during the exam. All videos and photos are stored in Honorlock’s platform. Their system runs in a secure, private cloud within Amazon’s AWS cloud platform in US data centers.

CWRU's contract with Honorlock has defined data retention periods of 3 months, after which all student-related data is automatically purged, unless the university requests an extension of a particular student’s data related to an academic integrity case.

All data, including photos and video, is stored in an encrypted format on isolated storage systems within Honorlock’s private cloud in Amazon’s AWS US data centers. They are SOC 2 Type 1, US Privacy Shield and GDPR compliant.

Only key staff within Honorlock will have access in order to provide quality control and support for CWRU instructors and UTech staff. Those accessing student data are bound to the FERPA and privacy requirements required by the CWRU/Honorlock master service agreement.

The AI automatically generates a flag if unusual activity is detected, such as another person entering the room, and can alert standby proctors to "pop in" and briefly monitor the session to correct problems. There is no live person watching the student during the entirety of the exam. Once an exam session is completed, instructors are able to review flagged recordings to determine if a cheating incident may have occurred.

The Chrome Web browser extension allows Honorlock to interact with the student and the exam content during the exam. This includes launching the webcam window and interacting with student behavior within the exam. During the exam, the following data is captured, analyzed, and stored:

  • Webcam video, including audio;
  • Recording of desktop activity;
  • Student information presented by the learning management system (Canvas), such as student name, course number, exam name, etc.;
  • Pages visited during the examination session; and
  • Specific student behavior that may indicate academic dishonesty, such as copy/paste into search engines.

Webcam and audio analysis has certain AI capabilities built in, such as detecting the presence of zero, one, or more faces in the camera, one or more voices, etc. This AI will generate a “flag,” prompting the instructor to review the exam session to determine if additional action is necessary to remediate any academic integrity issues.
 

Honorlock does not employ any technologies to allow detection of secondary devices connected to a student’s local/home network used during the proctoring session. No agents or applications are downloaded to these secondary devices to initiate any type of surveillance activities. Other users connected to the local/home network during a student’s Honorlock session can process personal or confidential information concurrently without fear of the student’s Honorlock session monitoring or eavesdropping on secondary device activities. In addition, the application does not have the capability of intercepting local/home network communications from devices connected during the student’s session.

Students using their smartphones to search online resources for test questions should note Honorlock utilizes a manual technology to detect academic integrity issues. Specifically, Honorlock hosts websites with seeded test questions that, when accessed during an examination session, sets off an action on the phone. This action is picked up during the student’s session and alerts instructors to review for academic integrity issues. Honorlock does not initiate any technologies to eavesdrop on the student’s smartphone activity either during or after an examination session. It is important for students to understand they are not authorized to use their phones during an Honorlock-proctored examination.

Instructors make the final assessment about whether suspected cheating has taken place during an exam session. Only students engaging in unusual activity during an exam are flagged and reviewed. If an instructor reviews the video and determines that the student did not violate CWRU's academic integrity policy, no action is taken. However, if an instructor determines that the student violated the academic integrity policy, that instructor will follow the appropriate channels for academic integrity violations. Students who feel wrongly accused of a violation can appeal the decision.

Yes. You are welcome to uninstall the Honorlock Chrome extension after your test is complete if you're not completely comfortable keeping it on your computer.

Additional Questions

If you have additional questions or concerns about Honorlock, please contact securetesting@case.edu.