Anti-cheat and in-exam security
This page covers platform-wide data protection. For the tools that keep individual exams secure, such as copy-paste blocking, question randomisation, exam passcodes, SSO and MFA, head to our exam security features.
Enterprise-grade data security and compliance
ISO 27001 certified and GDPR compliant, with encryption, regional hosting, and a 99.9% uptime SLA. Give your organisation complete confidence in how exam data is protected.
- ISO 27001 certified
- GDPR compliant
- 99.9% uptime SLA
10 million+
exams delivered worldwide
Trusted by awarding bodies, universities & professional bodies
Data security
Protect exam data at every layer
Security is a paramount priority for Synap; we take data protection and preventing unauthorised access seriously.
Data encryption
Synap ensures robust security with industry-grade encryption (TLS 1.2+ and AES-256) for data protection in transit and at rest.
Single Sign-On (SSO)
Streamline the login process by allowing users to log in with a single set of credentials using SSO (Auth0, SAML/2, JWT or ADFS).
Role-based access controls (RBAC)
Granular controls based on designated roles to restrict user access to specific information and functionality.
Multi-factor authentication (MFA)
Safeguard against unauthorised access with MFA, with all major authenticator apps supported.
Restrict IP addresses
Protect your exams by restricting access based on authorised IP addresses, supporting IPv4, IPv6, and CIDR notation.
Audit logs
Synap records critical system events, ensuring that only authorised users access and take action within the platform.
Anti-spam emails
Synap adheres to industry-standard email authentication protocols, such as DKIM and SPIF, boosting email security.
Penetration reports
Synap conducts regular penetration reports, conducted against the OWASP Top 10 and thousands of other attack vectors.
Reliability
Reliable and available when it counts
Synap is dedicated to ensuring reliable platform availability, minimising disruptions and providing a consistent, stable platform.
High concurrency
Synap handles high user concurrency, such as thousands starting exams simultaneously, through sophisticated automated scaling policies.
99.9% Uptime SLA
Synap guarantees reliability with a 99.9% Uptime SLA as standard, establishing a consistently stable environment.
Enhanced SLAs
Synap offers enhanced SLAs for critical periods (by negotiation), providing heightened reliability when it matters most.
Hosted on AWS
Hosted on Amazon Web Services (AWS), Synap leverages a highly scalable and secure environment for optimal performance and availability.
Multi-region redundancy
With servers across multiple geographic regions, Synap fortifies the platform against unforeseen events if one server goes down, providing a consistently reliable experience.
Continuous backups
Customer data, including content, is continuously backed up and retained for recoverability in case of disasters.
UK-based support
Synap offers timely assistance to admins, providing responsive support for queries, issue resolution, and guidance.
Security in the exam room
Security in the exam room
Built-in proctoring with Synoptic
Monitor exams with Synap’s own proctoring tool. Set the level of security per exam, from no-install browser delivery to full desktop lockdown, with automatic breach detection and post-exam review.
Security review
Need to complete a security or procurement review?
Book a call and we will walk your IT and compliance teams through our certifications, hosting, and data protection controls, and share the documentation you need.
Compliance
ISO 27001
Certified & independently audited
GDPR
Fully compliant
EU & US
Regional data hosting
You own it
Full content & data ownership
Documentation & policies
Ensure confidence in high-stakes assessments with Synap's security and proctoring features, safeguarding the credibility of exams and providing peace of mind.
APIs
Developer guidelines for integrating external systems with Synap.
Learn moreTerms of Service
Terms and conditions for using Synap's features and services.
Learn morePrivacy Policy
How we handle personal data and third-party subprocessors in line with privacy standards.
Learn moreSecurity Policy
Security measures for user data: encryption, access controls, and ongoing assessments.
Learn moreSubprocessors List & Management Policy
How we engage and manage third-party subprocessors in line with data protection standards.
Learn moreData Processing Agreement
Terms for the secure and compliant processing of user data.
Learn more
Still not sure?
Tell us what you need to assess and we will point you to the right answer.
Yes. Synap is ISO 27001 certified, the international standard for information security management, and our controls are independently audited. We can share our certificate and supporting documentation as part of a security review.
Yes. Synap is fully GDPR compliant and adheres to equivalent data protection laws. We can provide a Data Processing Agreement (DPA) and our list of subprocessors on request.
Synap is hosted on Amazon Web Services (AWS) with hosting options in both the EU and US, so you can keep data in the region that meets your regulatory requirements.
You do. You retain complete ownership of all content and data on your Synap portal, and none of it belongs to Synap.
All data is protected with industry-grade encryption: TLS 1.2+ in transit and AES-256 at rest, so information is secured both while it moves and while it is stored.
Synap provides a 99.9% uptime SLA as standard, with multi-region redundancy, automated scaling for high concurrency, and continuous backups. Enhanced SLAs are available by negotiation for critical exam periods.
Yes. We conduct regular penetration tests against the OWASP Top 10 and thousands of other attack vectors, and can share summary reports as part of a security review.
Interested in learning more about Synap?
Explore how Synap can help save you time and streamline your workload across assessments, exam delivery, and training programmes through a personalised demo.
Certified & independently rated
