Security and privacy

Your server. Your data. Nothing phones home.

Arrangely is two Windows installers: one for your server, one for your laptops. They talk to each other on your network, and to nothing else.

Where the data goes

From the laptop to your server. That's the whole map.

How data moves Exam laptops connect to the school's own server over HTTPS. Neither of them sends data to Arrangely or to any cloud service. Exam laptopApproved by your staff Exam laptopWork encrypted locally Exam laptopPinned to your server HTTPS Your school's serverRecords, papers and workNightly backups Us, or any cloudNo connection. No data.

In detail

How it's protected

Laptops must be approved

A newly installed laptop asks to join and waits. Only laptops staff approve can reach the server, and only those allowed for live exams can sit one.

Pinned HTTPS

Each laptop trusts your server's specific certificate, so it won't talk to a stand-in.

Encrypted work

The copy of a candidate's work kept on the laptop is encrypted, not left as a normal file.

Keeps data only as long as needed

Usage evidence is deleted automatically after a date you set, by default 31 January the year after the exam, to cover results and appeals. Leavers are removed then too.

Audit log and backups

Staff actions are logged, the server takes nightly backups, and its installer backs up before an upgrade.

Staff accounts

People see what their job needs

Use local accounts, with optional single sign-on through a standard OpenID Connect provider such as Entra or Google. Access checks happen on the server.

RoleCan do
AdminEverything, including settings and staff accounts.
Exams officerAll exam work, live and mock, but no settings.
Mock-exam staffAs exams officer, but live exams are hidden from them entirely.
Access arrangements (SENCo)Students' arrangements and colours, plus read-only usage.

Being straight with you

What lock-down does, and what it doesn't

What it does

  • Runs live exams full screen, with other screens covered.
  • Blocks common Windows shortcuts.
  • Takes the screen back if another program grabs it.
  • Records these events as evidence.

What it doesn't do

  • Promise that no one can ever leave. A standard Windows account can't guarantee that.
  • Control everything on the Ctrl+Alt+Del screen. Your own Group Policy or Intune settings handle that.
  • Replace your invigilators.

Try it in your school.

We're looking for UK schools to run Arrangely alongside what they use today, starting with mock exams.