> For the complete documentation index, see [llms.txt](https://synap.ac/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://synap.ac/docs/platform/exams/security-and-legal-terms.md).
# Security and legal terms
Security settings control how students enter an exam and whether they can return after closing or refreshing it. Legal terms can ask them to confirm a statement before they begin.
Security combines start controls such as locking and passcodes with the rule for resuming an in-progress attempt.
### Access controls
| Setting | What students experience | Useful when |
| ---------------- | ----------------------------------------------------------- | ------------------------------------------------------------------------------------- |
| Locked | Every attempt starts locked until an admin unlocks it | Coordinated starts in an exam centre or video call; requires a staffed unlock process |
| Attempt passcode | Candidate enters the configured code to unlock | Lightweight invigilation; distribute close to the sitting and rotate if exposed |
| Restrict by IP | Only listed Internet Protocol addresses may access the exam | Controlled networks; test public egress addresses and failover routes beforehand |
These controls can be combined. A candidate may be inside the allowed network but still require an admin unlock or passcode.
{% hint style="warning" %}
IP restrictions evaluate the address Synap receives, which may be a shared public address from a school, office, Virtual Private Network (VPN) or proxy. Do not enter a candidate device's private address such as `192.168.x.x` unless that is genuinely the public route seen by the service.
{% endhint %}
### Resume policy
| Setting | What students can do | What to bear in mind |
| -------------- | ------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------- |
| Always allowed | Can close and resume any number of times while the attempt remains active | More forgiving of device or connection problems; the timer continues in a timed exam |
| Same session | Can resume only from the same device and location | Balances recovery with control; device or network changes may require admin intervention |
| Never | Must complete in one sitting | Refreshing the browser also counts as a resume and will lock the student out |
The **Resume later** button in Candidate experience controls whether students see an intentional exit button. The **Resume attempt** setting here controls whether they are allowed back in. The button is not available for timed exams or where Security prevents re-entry.
### Code login
Code login lets students start with a short login code instead of their email address and password. You can optionally ask for their surname or external ID as a second detail. It is convenient for supervised sittings, but anyone with the required details may be able to enter that student’s attempt, so distribute codes carefully.
Share the **Candidate login link** rather than the normal sign-in page when using this method. Test a code before the sitting and decide how you will verify identity if a student asks for help.
### Legal terms
When enabled, legal terms appear before the exam and must be confirmed.
| Confirmation type | What the student does | When it may help |
| ----------------- | --------------------------------------------- | ----------------------------------------------------- |
| Checkbox | Selects a box beside the configured statement | Fast and familiar |
| Static text | Types an exact phrase defined by the admin | Demonstrates an active typed acknowledgement |
| Candidate name | Types their full name | Associates acknowledgement with an identity statement |
Configure a clear title, body and—when using a checkbox—a self-contained checkbox label. For static text, avoid punctuation or capitalisation that is needlessly error-prone under exam conditions.
Legal terms should be reviewed by the organisation responsible for the assessment. Synap records the interaction, but the wording and legal effect are the administrator's responsibility.
### How the security settings fit together
Browser restrictions such as disabled copying are candidate-experience controls. Locked attempts, passcodes and IP allow lists are access controls. Proctoring adds monitoring and breach evidence. Use the least burdensome combination that meets the assessment risk, and explain technical requirements before exam day.
### Rehearsal scenarios
Test at least:
* correct and incorrect passcodes;
* allowed and unlisted networks;
* unlock before and after the scheduled open time;
* browser close and resume for every resume policy;
* network change during a same-session attempt;
* legal confirmation errors;
* the escalation path when a legitimate candidate is blocked.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://synap.ac/docs/platform/exams/security-and-legal-terms.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
