Remote Certification Exams: Candidate Identification, Proctoring and 2026 Obligations

A candidate takes their vocational title or RS-listed certification exam from their living room, camera on, ID card held up to the lens. This scene, now common since remote learning became mainstream, raises a question few training providers plan for until they face it: how do you prove, if audited, that the person who obtained the certification is the same person who took the training and had it — or its funding — approved? Between identifying the candidate, proctoring the exam, and the new obligations introduced by France’s 2026 anti-fraud law, here is what an accredited provider needs to secure before opening a remote exam session.

A blind spot between the Qualiopi framework and the certifier’s exam rules

The French National Quality Framework governs pedagogical evaluation during a training course — that is the whole point of indicator 11 on meeting learning objectives — but it sets no technical rule on proctoring a remote certifying exam. That question falls under the exam regulations specific to each certification, set by the certifying body: France compétences for a vocational title (titre professionnel), or the relevant certifying organization for an RS-listed certification. A center that improvises its own procedure without having it validated by the certifier risks being disavowed after the fact — even if its Qualiopi compliance is otherwise flawless.

This is a point that a provider who has already secured its remote training compliance under Qualiopi often misses: the follow-up requirements that apply during a course (tracking connection, regular contact points) do not cover the requirements that apply at exam time, when the stakes shift from attendance to the candidate’s identity and autonomy during the test itself. For a vocational title, the composition and duties of the exam board remain exactly as described in our guide on the vocational title exam board: moving the exam online does not waive any of these rules, it simply adds a technical layer on top of them.

What the 25 June 2026 anti-fraud law changes

Law n° 2026-534 of 25 June 2026 on the fight against social and tax fraud made it mandatory for any training provider drawing on CPF funds to verify a trainee’s identity at enrollment and again on the first day of training. The same law also introduced, for the account holder, an obligation to attend the certifying exam or repay their CPF funds — we cover this second point in our article on absence from a CPF-funded exam.

Taken together, these two obligations close a logical loop: it is no longer enough to check who enrolls and who starts the training — a provider must also be able to show who actually shows up for the final exam, particularly when it takes place remotely and the provider cannot rely on a simple visual check in a physical room. The law, however, prescribes no specific surveillance technology: it sets an obligation of result — being able to prove identity — and leaves the provider free to choose its means, within the rules set by each certification’s own regulations.

Identifying a remote candidate: what is actually required

In practice, three levels of rigor coexist depending on the exam’s financial and regulatory weight:

• Simple declarative check: the candidate holds up an ID card to the camera at the start of the exam, and the examiner compares the face and name against the enrollment record. Adequate for a formative assessment, insufficient on its own for a certifying exam that unlocks public funding.
• Reinforced check with an audit trail: a timestamped screenshot or photo of the ID card, archived in the candidate’s file alongside their digital sign-in and a recording or transcript of the session. This is the level expected for most vocational titles and CPF-funded certifications.
• Technology-based proctoring: dedicated software that monitors the candidate’s environment (webcam, microphone, screen sharing, sometimes continuous facial recognition) throughout the exam. This level remains a provider’s own choice, or a requirement set by the certifier for a small number of high-stakes certifications — never a general legal obligation.

Whichever level you choose, keep the evidence for as long as set out in your document retention policy: a service-delivery audit can happen months, or even years, after the session.

What research says about the limits of proctoring

Before investing in an automated proctoring solution, it helps to know what research actually shows about its effectiveness. A systematic review of 58 studies published between 2010 and 2021, conducted by Noorbehbahani, Mohammadi and Aminazadeh and published in 2022 in Education and Information Technologies, finds that detecting cheating in online exams remains an active research field where no method, human or automated, fully eliminates either the risk of cheating or false positives (see the study). An earlier study by Alessio, Malay, Maurer, Bailer and Rubin, published in 2017 in the journal Online Learning, measured an average score gap of 17 points across 147 students between proctored and unproctored sessions of the same course (see the study) — a sign that the mere presence of a monitoring system changes candidate behavior, independent of any cheating actually detected.

In practical terms, this means two things for an accredited provider: first, a proctoring solution is no absolute guarantee against fraud and never removes the need to verify identity beforehand; second, a technical incident (a dropped webcam feed, a false positive from the algorithm) needs a clear procedure in place — retaking the exam, a second examiner as witness — rather than being handled ad hoc on the day.

GDPR: extra care around facial recognition

A proctoring tool that processes biometric data (continuous automated facial recognition of the candidate throughout the exam) counts as a higher-risk processing activity under GDPR, distinct from a one-off visual check of an ID card. Before deploying such a tool, check its compliance and document the legal basis for the processing in your training provider’s GDPR record: a legitimate interest in securing a certification does not remove the duty to clearly inform the candidate, nor the need for an alternative when a candidate has a justified reason to refuse the tool — a disability incompatible with it, for example.

Checklist before opening a remote exam session

• Check the certifier’s exam regulations: does it impose a specific procedure for remote sittings, or does it leave the provider to define its own?
• Plan a two-step identification process, consistent with the one already required for CPF enrollment: an ID card shown to the camera, matched against the name on the enrollment file.
• Archive timestamped proof of the exam session (a screenshot, recording, or connection log), kept according to your document policy.
• Write a procedure for technical incidents, shared with candidates before the exam.
• Inform candidates in writing about the monitoring system used and their rights regarding any personal data collected.

Take action

Securing a remote exam session requires documents that stay consistent from enrollment through to the archived proof of attendance: the Complete Kit Certif (€297, 14-day guarantee) provides the procedure and evidence templates aligned with what Qualiopi auditors expect. If you are just setting up your training organization, the ebook Create Your Training Organization in 30 Days (€67) lays the administrative groundwork before your first session, and the Complete Pack (€347) bundles both resources to tackle certification and remote delivery with confidence.