GDPR Security

Last updated: [11/2025]

International Testing & Training Services Ltd (ITTS) is committed to protecting personal data, maintaining strong security controls, and complying with UK GDPR and EU GDPR principles.

1. Who we are
International Testing & Training Services Ltd (ITTS) is committed to protecting personal data, maintaining appropriate technical and organisational security measures, and complying with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and applicable data protection laws.

ITTS is part of the International Assessment Group (IAG), which provides shared governance, information security, risk management, and compliance oversight across its operating companies:

• International Assessment Group (IAG),
• Certify Assessment Solutions Ltd (CAS)

Each operating company is responsible for the personal data it processes in the course ofdelivering its services, in accordance with applicable law and contractual arrangements.

Their respective Privacy Policies explain these roles in detail.

2. Our compliance foundations

We follow:

• UK GDPR
• EU GDPR (where applicable)
• Data Protection Act 2018
• ISO 27001 principles
• Industry best practice for information security

We are on course to obtain formal ISO certification by February 2026.

3. Hosting & data storage

Our platforms use AWS and Azure secure infrastructure.

We do not store candidate or customer data outside approved regions.

4. Security Measures

We implement:

• Secure development practices
• Encryption in transit and at rest
• Multi-factor authentication
• Role-based access control
• Regular vulnerability scanning
• Supplier due-diligence processes
• Business continuity and disaster recovery plans
• Audit logging under development

5. Use of AI technologies

• Only CAS uses AI-supported proctoring features within SmarTest Invigilate.
AI does not make final decisions; human review is always required.

See our Use of AI page for more details.

6. Your rights

Individuals have rights under GDPR, including access, rectification, deletion, restriction, and objection.
Requests can be made via:

Privacy@iagassessment.com

7. Contact the Privacy Team

For questions regarding GDPR or security compliance:

Privacy@iagassessment.com

We use cookies to personalise and enhance your experience on our site. Visit our Privacy Policy to learn more.   We are committed to protecting your privacy and ensuring your data is handled in compliance with the General Data Protection Regulation (GDPR).

Request more information

itts-popup

Contact us to explore how we can ensure secure, seamless exam delivery and ongoing support.