Skip to main content
PassNHAExam

Trust center

Security, privacy and content integrity

PassNHAExam handles candidate accounts, study history and payments. This page explains the controls that are in place today and where responsibility sits between us, our providers and you.

This page is maintained by the PassNHAExam team to answer common security and privacy questions about the platform. It describes our current practices — it is not an independent audit, certification or attestation, and it does not replace our Privacy Policy or Terms of Service.

Accounts and authentication

  • Email and password sign-in plus Google single sign-on, handled by our managed authentication provider.
  • Passwords are stored only as salted hashes by that provider — the application never sees a plaintext password.
  • Self-service password reset is delivered by email with time-limited links.
  • Administrative capabilities are gated by a server-side role check, never by anything stored in the browser.

Your study data

  • Question attempts, exam sessions, flashcard reviews, bookmarks, notes and AI coach threads are scoped to your account.
  • Row-level security policies are enforced in the database, so one account cannot read another account's records.
  • Data is encrypted in transit over TLS and encrypted at rest by our hosting provider.

Platform and hosting

  • The application is served over HTTPS from managed cloud infrastructure with automated backups of the primary database.
  • Application and database changes are version-controlled and deployed through an automated pipeline.

Payments

  • Checkout runs in our payment provider's hosted overlay. Card numbers are never entered into, transmitted through, or stored by PassNHAExam.
  • Subscription status is updated from signed webhook events, and the account each purchase belongs to is determined on our server rather than trusted from the browser.

Subprocessors and integrations

  • Managed cloud database, authentication and file storage for account and study data.
  • A payment provider for checkout, invoices and subscription billing.
  • An AI model provider that processes the messages you send to the AI Study Coach in order to generate a reply.
  • Transactional email delivery for account, receipt and support messages.

Retention and deletion

  • Study history is retained while your account is active so your progress analytics stay meaningful.
  • You can ask us to delete your account and associated study data at any time by emailing support@passnhaexam.com.
  • Billing records are retained where we are required to keep them for tax and accounting purposes.

Content integrity

  • Every question carries a rationale and a reference to the underlying federal regulation or standard.
  • Items are reviewed against current CMS requirements and revised as guidance changes.
  • PassNHAExam is an independent study provider. We are not affiliated with NAB or any state licensing board, and we do not reproduce live examination content.

Reporting a problem

  • Security or privacy concerns: email support@passnhaexam.com with "Security" in the subject line.
  • We aim to acknowledge security reports within two business days.
  • Please do not include passwords or payment details in your report.

Shared responsibility

Our providers

Infrastructure security, encryption at rest, database backups and payment card handling.

PassNHAExam

Access rules for your data, role checks on administrative features, content review and responding to privacy and security requests.

You

Keeping your password private, using a current browser and not sharing your account with other candidates.