Try BlumvoBook a demo
Sign inTry BlumvoBook a demo
SecurityReviewed for your college

Your students’ data, and who can see it.

  1. Where is it stored?In India, in Mumbai.
  2. Who can see it?Your staff, by their role. No other college.
  3. What does a student see in a test?The paper. Never the answer key.
  4. What if something goes wrong?We tell you within 72 hours.

Stored in Mumbai.

The database, the files students upload and the servers that run their code are all in India.

  • Database: Accounts, answers, marks and results.
  • Files: Uploads, including proctoring images.
  • Code runs: The servers that run students' code.
  • Every connection uses HTTPS, and data at rest is encrypted by our hosting providers.
Every provider, and where it is

Who sees what.

A student
OwnTheir own work, marks and results.
Your staff
By roleWhat their role allows. A trainer, a department head and a placement director are separate roles.
Another college
NoneNothing. Each college's data is kept apart in the database.
The Blumvo team
LoggedOnly what their work needs, behind two-factor sign-in. Administrative actions are logged.

Passwords are stored only as salted hashes. Staff can turn on two-step sign-in in their settings.

During a test.

  • Answer keys stay with us.They are never sent to a student's device.
  • Answers save to the student's own attempt.Nobody else's paper can be written to.
  • Camera, if your college turns it on.A few still images, never video.
  • Microphone, if your college turns it on.Only whether voices are present. No audio is kept.
  • Flags go to your faculty.Your college decides every case.

If something goes wrong.

If your college’s data is affected, your named contacts hear from us by email and phone within 72 hours of us finding out.

  1. 1We help with the notice to the Data Protection Board of India and to your students.
  2. 2We send you a written report once it is resolved.
  3. 3We report cyber security incidents to CERT-In as its directions require.

Outages and suspected breaches, at any hour: incidents@assessly.in

Outside researchers test Blumvo.

Researchers credited
17
Flaws found and fixed
28
Security research, our bug bounty

FAQ

Your college does. Blumvo processes it only on your college's instructions, under the Data Processing Annex you sign.

Yes. Ask for an export in CSV or JSON at any time during the agreement and at its end, at no extra charge.

No identifiable personal data is used to train AI models. Our AI providers are bound by contract not to train on what we send them.

Your staff keep read access for 30 days to review and export. Within 30 days after that, we delete your college's data from our live systems and confirm it in writing if you ask.

Reviewing Blumvo for your college?

Your IT team can have the full Data Processing Annex and our security and data sheet.

Ask for the annex