Integrity Monitor
Privacy Guarantees
What the integrity monitor does and does not collect.
What Is Processed
- MediaPipe FaceMesh runs entirely in the browser (JavaScript + WebAssembly)
- Camera feed → face landmark detection → gaze angle calculation → flag decision
- All processing happens on the candidate's device
What Is Transmitted
Only flag metadata:
{
"type": "extended_gaze_away",
"timestamp": "2026-04-14T10:32:15Z",
"duration": 4500
}What Is NEVER Transmitted or Stored
- Video frames or images
- Face landmark coordinates
- Gaze vectors
- Biometric measurements
- Camera pixel data
- MediaPipe model outputs
Candidate Experience
- Small camera icon in interview header (no video feed shown)
- Non-accusatory banner when flags trigger: "Please keep your focus on the interview"
- Explicit privacy disclosure before interview starts (green "NEVER collect" section)
- No Mercor-style camera preview — showing the feed hurts candidate performance
Legal Considerations
The integrity monitor is designed to avoid classification as biometric data collection under BIPA, GDPR, and similar regulations. All biometric processing happens client-side and is immediately discarded. Only behavioral event metadata crosses the network boundary.