MICKAI®SectorsExamination and Testing Boards
Team
Sector · Where the question paper never leaves the vault until test day.

Examination and Testing Boards

Examination and testing boards live and die by the secrecy of unreleased questions, mark schemes and rubrics; a single leak can void a whole sitting, trigger a regulator inquiry and destroy public trust. These institutions want to draft, balance and review large banks of exam variants at scale, yet sending unreleased items to a public cloud model puts the crown jewels on third-party infrastructure and exposes candidate data to cross-border transfer. That is exactly why the cloud is barred for item development. Mickai brings the full generation, balancing and review pipeline in-house, onto hardware the board owns under keys it holds, so questions are written and kept secret inside the building until release.

The problem and our solution
The buyer

Examination and testing boards and awarding organisations responsible for live, unreleased assessment materials.

The problem

Unreleased questions, mark schemes and rubrics are the crown jewels, and any exposure to a cloud model or outside processor risks a leak that voids the sitting and triggers a regulator inquiry.

Our sovereign solution

Secure local item generation, balancing and review on hardware the board owns under its own keys, so draft material is never sent to a third party.

The value

Balanced exam variants are drafted and kept secret inside the building until test day, with no third party ever seeing them.

The sovereign advantages

These architectural choices support control over the workflows in your deployment. Their benefits depend on configuration, integrations and operating practices. Review external connections, physical security, access and compliance responsibilities together.

Control the processing boundary

Scope inference, extraction, retrieval and storage on infrastructure you control. Document and test any external connector, support channel or transfer before describing a workflow as zero-egress.

Plan for disconnected work

Workflows with local models, data and supporting services can continue offline. Live external email, calendars and other services need an approved connection or controlled import, with clear unavailable and pending states.

Make data location inspectable

Map prompts, documents, indexes, logs and backups to their processing and storage locations. Local hosting supports control of location; access, retention and any transfers still need review.

Use approved company knowledge

Prepare and classify source records, preserve permissions and evaluate answers against the originals. Retrieval and model training are separate choices; agree data use and licences for each.

Budget for the whole service

Compare hardware and licences alongside integration, power, administration, support, updates, evaluation and recovery. Measure cost at the required workload and quality before claiming savings.

Verify access and authority

Define who holds keys, who can administer the system and which actions need approval. Test denied requests, revoked access and audit records. Physical security, insider risk and incident response remain operational responsibilities.

Control change and exit

Agree version selection, signed update procedures, rollback, data export and licence rights. Reassess requirements as software and obligations change; owning hardware does not remove maintenance or compliance work.

Requirements to assess

Review the requirements relevant to your organisation, jurisdiction and intended use with your responsible teams. Cloud services can be appropriate subject to applicable safeguards; on-premise deployment alone does not establish compliance or remove supplier responsibilities.

Ofqual General Conditions of Recognition, including the security and malpractice conditions on exam materials
Statutory exam-security and integrity duties governing the handling of live assessment materials
UK GDPR and the Data Protection Act 2018 for candidate personal data
JCQ instructions for the conduct of examinations and confidentiality of assessment materials
Public sector and accreditation obligations on records retention, access control and audit
Organisations of this profile

The kind of organisation this serves, named illustratively from public information to characterise the market. These are target profiles, not customers: Mickai has no relationship, engagement, trial, or endorsement with any of them.

PearsonAQAOCRCambridge University Press and AssessmentCollege Board
The lead studios

The enterprise studios that lead in this sector, drawn from the eighteen that sit on the one sovereign substrate. Scope their local processing, operator-held keys and Open Audit Record coverage for the proposed deployment. Confirm availability and any external integrations before relying on a workflow.

Department studio

Training and LMS

Generates balanced exam variants, mark schemes and rubrics locally, mapped to the specification, and keeps the whole item bank inside the building until release.

Department studio

Contract Review and Legal-Ops

Reviews assessment materials, awarding contracts and centre agreements against confidentiality and integrity obligations without exposing draft items to outside counsel platforms.

Department studio

Compliance and Regulator Mode

Maps every workflow to Ofqual conditions and produces regulator-ready evidence on demand, removing the third-party cloud-exposure vector while the board keeps its own obligations.

Department studio

Audit

Holds an immutable, on-premise audit trail of who drafted, edited, accessed and approved each item, which is decisive in any leak or malpractice investigation.

Department studio

Executive BI

Gives leadership a private view of item-bank coverage, difficulty balance and review status across sittings, with no assessment data leaving the estate.

See all eighteen on the sovereign services catalogue.

The opportunity

Awarding organisations face rising pressure to produce more frequent, on-demand and adaptive assessments while item-leak incidents and AI-assisted cheating sharpen regulator scrutiny, yet the most capable generation tools are precisely the cloud services they cannot lawfully feed live material into. That gap, between the demand for AI-scale item production and the prohibition on cloud exposure, is where a sovereign, on-premise pipeline becomes the only viable path.

The outcome

Measure value, cost and risk on hardware you control.

Boards displace per-token cloud spend and the cost of bespoke secure-hosting contracts, compress the cost and lead time of drafting and balancing large item banks, and remove the third-party cloud-exposure vector that drives leak risk and regulator findings; the data never leaves the building, so a sitting is far less likely to be voided by a breach traced to an outside processor, while the board retains its own physical, personnel and integrity controls.

Lawful B2B engagement

Map the sovereign stack to your examination and testing boards estate.

Briefings are for organisations weighing a sovereign, on-premises deployment. Tell us about your estate and we will walk the pack, the regulatory crosswalk, and the deployment that fits your estate.

Other sectors
Retail with customer-data depth
Retail
Law firms and legal-ops
Legal
Banking, insurance, and financial services
Finance
NHS Trusts and private healthcare
Healthcare
Defence and government
Public Sector
Generational discretion and an uncompromised deal edge, on hardware you own.
VCs and Family Offices
Multi-generational wealth, processed entirely inside your own walls.
Private Banking and Wealth
The ledger never leaves the firm.
Accounting, Tax and Audit
Price the risk without surrendering the risk profile.
Insurance and Actuarial
Sovereign discovery infrastructure for assets too valuable to leave the building.
Pharma, Biotech and Pre-patent IP
Quality auditing of device and calibration data that never leaves the building.
Medical Devices
Bunker-grade AI for work that can never touch the public cloud.
Defence, Aerospace and Dual-Use
Off-grid intelligence for the systems a nation cannot afford to lose.
Critical Infrastructure, Maritime and Energy
Your process is your moat. Keep it inside the factory walls.
Heavy Industry, Manufacturing and Semiconductors
Network intelligence that never leaves the core
Telecommunications
Sovereign research intelligence that keeps the IP, and the dual-use risk, on campus.
Academic and University Research
Sift the whole talent pool without the raw records ever leaving your building.
Executive Search and HR
Athlete telemetry and tactics that never leave the training ground.
Elite Sport and Performance
The client black book that never leaves the room.
Luxury, Private Aviation and VIP Concierge
Clienteling and collections held in the house, not the cloud.
Luxury Fashion
Tag every frame on premises, so no pixel ever leaves the studio.
Commercial Photography and Media Houses
Sovereign deal intelligence for the agencies that hold the industry's secrets.
Talent and Literary Agencies
Your catalogue, indexed and searchable, with no master ever leaving the building.
Music Studios and Labels
Source protection that never leaves the newsroom.
Press and Investigative Journalism
The IP lifecycle stays under lock and key, from script to final pixel.
Film, TV and VFX
Safeguarding intelligence that never leaves the trust.
Multi-Academy Trusts (Primary and Secondary)
Special-needs records that never leave the setting
SEN and Alternative Provision
Ship native AI for schools without inheriting the data-processing-agreement fight.
EdTech and LMS Vendors