How Secure Is My Personal Information on This Site?
If you work in networking or infrastructure, security is already second nature to you — so it's a fair question to ask what a certification practice site actually holds on you. NWExam holds very little: no card or bank details at all, only the username, email and registration details you entered yourself, plus the practice you build up as you go.
Payment is the clearest case, so start there. Checkout hands the transaction to an external gateway, so your card and bank details are entered on the gateway’s side and never make their way back to NWExam. The controls that protect the sign-in itself are covered separately, in the answer on whether your data is secure — this one sticks to what the site does and does not hold about you.
What Your NWExam Account Holds About You
Everything on the list is something you supplied yourself:
- your username and email address;
- the registration details you gave, including the networking or infrastructure exam code you named as your track;
- and your own practice history — the sittings you have completed, along with the scores and per-item records behind them.
That’s the full extent of it — no financial details, no data beyond what's needed to track your exam practice. How long those attempt records are kept is dealt with where retention is explained, and isn’t repeated here.
Where Your Card Details Go
When you buy Premium, the payment itself is completed at an external gateway, not on NWExam. Your card or bank information is entered on the gateway’s side of that transaction and is never handed back to the site to be kept — NWExam simply records that an order was placed and grants the access it paid for, without retaining any payment instrument. That's why the account can hold so little in the first place: the most sensitive part of any purchase never reaches it at all.
In short, NWExam keeps only the account you made and the networking exam practice you’ve done — nothing financial ever touches the site, since that's completed away from it at an external gateway. For how the sign-in itself is kept safe, see the related answer on data security below.
