Trust is a product capability.

Authorized human evaluators own scores, and human users own workflow decisions. Outcome changes are recorded.

Where AI is used, the model identity and relevant configuration context are recorded, and AI generations can be traced to their configured context.

Score and decision changes are kept in an append-only history, and direct writes to outcome tables are restricted.

Critical AI functions can be paused, and incidents can be routed for review. A pause stops the AI provider call and never scores or rejects a candidate.

Candidates are informed when AI is used in an assessment.

In-app governance notification delivery has been verified in production within a controlled scope.

Per-workspace retention windows are enforced automatically for monitoring media AND for assessment records (responses, scores, notes, decisions — 24-month default, organization-configurable). Operational logs and organization offboarding follow published schedules, executed by the same daily automation.

Camera, screen, and microphone capture are each turned on per assessment by the organization and are disclosed to the candidate on the consent screen before the exam starts. Nothing is captured unless the organization enables it.

For ID-verified sessions an organization may attach a reference photo of the candidate. It is stored privately, disclosed to the candidate on the consent screen, and shown only to a human reviewer beside the session selfie and photo ID. The reference photo is never fed to automated matching, and the organization can remove it at any time. (Separately and only when a delivery requires ID verification, a disclosed face-verification service may compare the session selfie with the captured ID photo — see AI Governance.)