Security

Built for records that are evidence.

Examination records outlive contracts. ARCH keeps them in the UK, keeps every organisation apart, and records who changed what and when.

Stored in London

Examination data is held in a UK data centre.

Each organisation kept apart

Every record carries its organisation. Automated tests try to cross that line on every change, and must fail.

Two-factor sign-in

Required for administrators and real examinations. Accounts are created by your administrator; there is no self-registration.

Full audit trail

Who did what and when, kept with the examination. A copy of the whole report is saved at every change of state.

Export any time

Your whole organisation's data, from the admin screen or on request. You remain the controller of it.

✦

AI under commercial terms

Requests go to Anthropic under terms that don't allow training on your data. AI can be left switched off.

Server-side rules

Enforced on the server, not just hidden on screen.

Who can do what is checked by the server on every request: an examiner can never review their own examination, only the examining team edits their sections, and each organisation sees only its own records.

Automated checks · every change
PassAnother organisation's examination is refused.
PassAn examiner reviewing their own examination is refused.
PassSign-in without two-factor cannot send a real examination.
PassA rule switched off on purpose makes its test fail.

Questions from your IT or security team?

We'll answer them directly.