Record-and-review proctoring captures the full exam session — webcam video, screen recording, and often audio — and stores it for a human reviewer to examine after the candidate has submitted. This decoupling of recording from review is the defining feature: the candidate can take the exam at any time within a window without waiting for a live proctor to be available, and reviewers can work through sessions asynchronously at a time that suits their workflow. To make review efficient, most platforms apply automated flagging that pre-selects moments of potential concern — a tab switch, an unusual gaze direction, background voices — so the reviewer can jump to flagged segments rather than watching entire sessions from start to finish. Record-and-review sits between live proctoring and fully automated proctoring in the cost-accuracy trade-off: it is cheaper per exam than live because reviewers are not constrained to a one-to-one ratio, but it retains human judgment at the point of decision, reducing false-positive errors compared with AI-only systems. The main gotcha is data retention: recorded sessions are often hours of sensitive personal video that must be stored securely, retained only as long as legally required, and deleted on schedule, with access controls preventing unauthorized viewing. Institutions should document the retention period and deletion process explicitly in their data protection impact assessment. Failing to set up automated deletion workflows is one of the most common compliance gaps found during audits of proctoring deployments.
