Careful with data, strict about results
A placement test handles two things that deserve care: the personal details of people who have only just contacted your school, and a result you are going to act on.
Results that mean something
A level is only worth having if it cannot be manufactured.
- Scored on our servers
- The correct answer, the difficulty of a question and the running estimate never travel to the candidate's phone or computer. There is nothing in the page to inspect.
- Drawn afresh for each candidate
- Questions are chosen one at a time from a bank of thousands, and the answer options are shuffled for each candidate.
- One link, one candidate
- Every invitation has its own secret link. Opening it on a second device moves the test there; the first stops working.
- Counted once
- An answer sent twice, or from two windows at the same moment, counts once.
Your candidates' data
Your school decides what is collected and remains in charge of it.
- Only what placing needs
- Name and e-mail address; phone number and date of birth only if you choose to add them.
- Kept in the European Union
- The application and its database run on servers in the EU. E-mails are sent through a provider based in the USA.
- Each school sees only its own
- Every record carries its school, and every request is checked against it. One school cannot reach another's candidates or results. We look at a school's data only to run and support the service.
- Deleted when you say so
- Removing a candidate removes the name, e-mail address, phone number and date of birth. The test result stays in your statistics without a name.
Accounts and payments
The ordinary things, done properly.
- Passwords
- Stored only as salted hashes that cannot be turned back into the password. Repeated wrong attempts pause the sign-in.
- Keys and sessions
- API keys, sign-in sessions and password links are kept as fingerprints, not as the secret itself. An API key is shown once, when it is made.
- Card payments
- Cards are entered in Stripe's own form and go straight to Stripe. Card numbers never pass through or rest on our servers.
- Encrypted in transit
- Every page and every call is served over HTTPS.
Who is responsible for what
Under the GDPR your school is the controller of its candidates’ data: you decide whom to test and what to do with the result. Amber IT Solutions d.o.o. processes that data on your behalf, only to provide the test, as set out in our terms of service. If your school needs a separate data-processing agreement, ask us for one.
What we collect on this website, and the companies that help us run the service, are set out in the privacy policy. Questions about security or data protection reach us at finances@amber-it.co.
Place your next intake with NGPT
Tell us about your school and we add 10 free tests to your account. Use them on real candidates and see the results for yourself.