Security

Last updated: July 7, 2026

How we technically protect the data entrusted to Examino.

Encryption

• In transit: all communications are encrypted (TLS 1.2 minimum), between your browser and our servers as well as between our servers and our service providers.

Access control

• Each account only has access to its own data: your exams and exam papers are not visible to any other user.

• Our team's access to production systems is restricted, granted on a named-individual basis and limited to the strict minimum (principle of least privilege).

• Passwords are stored in hashed form using a proven algorithm; we do not know them.

Traceability

• Changes to corrections are logged and timestamped, distinguishing what was generated by the AI from what was edited by the teacher.

• AI processing steps are traced (without the content of the exam papers) for audit purposes.

Backups and continuity

• Data is backed up redundantly by our hosting providers.

• At the end of the contract, data is returned or deleted; the deletion is then propagated to the backups over the course of their rotation cycle.

Continuous improvement

• Software dependencies are monitored for vulnerabilities and updated regularly.

• External security audits are planned; their findings will feed into this page.

Report a vulnerability

Have you identified a vulnerability? Write to us at security@examino.ai. We commit to acknowledging receipt within 72 hours and to not pursuing research conducted in good faith.

Our reporting contact details are also published in the standard format (RFC 9116) at https://examino.ai/.well-known/security.txt.