What is an audit trail in assessment – and why does it matter?

The record behind every grade

An exam involves many steps and many people: students sitting the exam, invigilators supervising it, markers assessing it, moderators reviewing it and administrators confirming the result. Most of the time, no one needs to look back at those steps. But when a student says their work was not saved, a deadline is questioned or a grade is appealed, the institution needs to know exactly what happened. An audit trail is what makes that possible.

On paper, that record was scattered across attendance lists, signed scripts and marking sheets. In digital assessment, it can be captured automatically and consistently – as long as the system is designed to record the right things.

How does it work?

The details vary between systems, but an audit trail in assessment usually covers the following:

• The exam itself. When a student started, saved, lost and regained their connection, submitted and left the exam.
• Supervision and administration. Attendance, deadline extensions and comments made by invigilators or exam staff.
• The marking. Which assessor submitted which grade, when, and with what comments – including grades withdrawn, unlocked or changed.
• Moderation and final decisions. Disagreements between markers and how the final grade was reached.
• Access and storage. Who can see the record, and how long it is kept, in line with data protection rules.

Why does an audit trail matter?

The main reason is legal certainty. A grade is a decision with real consequences for the student, and it must be possible to show how it was reached. When a case is complained about or appealed, an audit trail turns a disagreement about what happened into a question that can be answered with evidence.

It protects everyone involved. Students can show that they submitted on time or lost their connection through no fault of their own. Markers and institutions can show that procedures were followed. And looking across audit data can reveal patterns – such as frequent grade changes or disagreements between markers – that help improve the quality of assessment over time.

What an audit trail cannot do

An audit trail records actions, not intentions. It can show that a grade was changed, but not whether the change was right. It can show a student’s connection dropped, but not why. The record still needs to be read and interpreted by people who understand the context.

It also only covers what the system is designed to log. Actions taken outside the system – a discussion between markers by email, for example – will not appear unless they are recorded there. And audit data is personal data: it must be collected for a clear purpose, protected and deleted when it is no longer needed.

How does WISEflow approach it?

In WISEflow, the audit trail is built into the platform, so it is recorded automatically rather than kept by hand. Our understanding goes a little further than logging events:

• The exam, step by step. Participant logs record events such as starting, saving, disconnecting and reconnecting, incorrect passwords and submission – each with a time stamp. Progress is tracked too: in a closed-book essay exam, every save and revision of the text, and in a multiple-choice exam, each saved answer and how far the student has come.
• Live insight for invigilators. The participation monitor shows each student’s progress, connection and submission status during the exam, and records changes to attendance, extensions and comments.
• A grade audit trail. Every submitted grade is recorded with the assessor, time and comments – including conflicts between co-assessors, withdrawn grades and grades unlocked by a manager.
• Access by role. Assessors see their own grades, while reviewers and managers see the full picture.
• Data for analysis. Audit events can be exported through the WISEflow API, so institutions can analyse marking patterns across flows.

What should institutions consider?

• Purpose: be clear about what the audit trail is used for – and what it is not.
• Coverage: check that the system records every vital data point – from start and saves to submission, grades and changes – so there are no gaps when evidence is needed.
• Process: keep decisions inside the system, so the record is complete.
• Access: decide who may view audit data, and in which situations.
• Retention: align how long audit data is kept with regulations and appeal deadlines.

An audit trail is not about mistrust. Used well, as part of a considered approach to digital assessment, it ensures that every grade can be explained – and that every student can be treated fairly when questions arise.