Information about each request to the API, namely the time, token, path, module, status code, request and response size, IP address and client application, is stored for 180 days. For requests made on behalf of a student, the identifiers of the application and of the student are also stored.
The full content of each request and response for all modules, namely the request address, the headers except authorization data, and the request and response bodies, is stored for 7 days and deleted upon expiry of this period. The values of API tokens and access tokens are not stored. Files transmitted in requests and responses are not stored; only their size and checksum are retained.
Requests to the ALEM module are subject to automated analysis, which determines the language, subject matter and task type, as well as signs of abuse and the presence of personal data. The analysis is carried out for the purposes of monitoring, ensuring security and improving the service.