Tender 27 items · Real-device test report (2026-10-10)

Test time 2026-10-10: T69 13:40–17:28, Samsung 15:21–18:22 (Beijing time)

Test devices T69-A (factory-preinstalled configuration, Android 15, same as the customer's tablets) and Samsung Galaxy Tab A8 SM-X200 (customer environment: installable version, Android 14)

Client version 4.2.4.3 (657); T69 installed with the system-identity version, Samsung installed with the standard version; both are official production releases (APK sha256 listed in their respective regression reports)

Assessment criteria Only results visible on the tablets and device acknowledgments count. Items not verified (due to environmental limitations, such as no satellite reception indoors) are listed separately and do not count as passes

Overall results T69: 254 passed, 1 failed, 4 not verified; Samsung: 171 passed, 2 failed, 5 not verified

Explanation of failed items None of the 3 failed items are product defects or part of the 27 criteria: ① T69 «Resend push 5 times, count only once» — the two tablets were on the same Wi-Fi network and had the same external IP address, so the criterion incorrectly attributed Samsung's 2 task fetches to T69 (this can be verified against the server-side task records). The criterion has been corrected, and T69 passed when retested separately; ② Samsung «Push a different URL while courseware is open» — the tablet screenshot already showed the new courseware at the time of failure, and the server logs show the webpage had loaded within 1 second. The criterion failed because the webpage text was not detected when reading the tablet interface. The criterion has been corrected, and Samsung passed when retested separately; ③ Samsung «Scheduled reporting after reboot» — after the tablet rebooted, its USB connection to the test computer was not re-established (the server showed that the tablet was powered on and online). This was due to the test environment; Samsung passed a separate retest at 21:17 (it reconnected 30 seconds after reboot and uploaded automatically at the scheduled time).

Conclusion Of the 27 items, 25 passed; 2 were partially implemented (see the explanation for each item for details of the boundaries)

I. Passed (25 items)

Clause	Requirement	Results on both devices	Evidence	Functional boundaries and data retention
1	Simple single sign-on authentication (SSO)	Server-side use case validation (unrelated to tablets)	10/10 Browser sign-in verified: the school account logged in via Auth0 and entered school_teacher (teacher, Class 101); the server-side release gate has 5 single sign-on end-to-end test cases	Local accounts (username + password) are always available; even an identity provider outage cannot lock out administrators. School accounts require the identity provider to indicate that the email address has been verified; users not pre-assigned at their first sign-in receive read-only accounts with no classes.
2	Secure, simple environment dedicated to classroom use (self-service lock mode / child-friendly interface)	T69: 1/1 passed; Samsung: 1/1 passed	All 5 criteria (multi-app Kiosk lock; 4 child mode criteria) passed on both devices; child mode available starting with 656	Once Kiosk is locked, students cannot exit: there is no settings entry point, and pressing Home/Back/Multitasking returns to the locked screen. There are only two ways to exit: ① Select «Sign out» in the tablet menu and enter the school-set exit password (validated by the server; 5 consecutive incorrect entries lock it for 10 minutes; this can be changed in the device group); ② The administrator turns off Kiosk in the console. If no exit password is set, nobody can exit on the tablet. Child mode only changes the appearance of the multi-app desktop; the rules remain unchanged.
3	Completely hide the operating system, device settings, open browser, and app store entry points	T69: 1/1 passed; Samsung: 1/1 passed	Both devices passed the criterion «Hiding system apps really hides the browser and store»	The browser and app store can be hidden; «Set» cannot be hidden (the tablet will freeze on the next boot if it is hidden), so use Kiosk + hardening to prevent students from accessing Settings. Only apps installed on this group of tablets can be hidden.
4	Block exit gestures and physical / virtual system buttons to prevent children from accidentally exiting the current app.	T69: 1/1 passed; Samsung: 1/1 passed	Both tablets passed the criterion “Kiosk hardening can be applied while students are using the app” (the Home button was physically pressed each round to confirm they could not exit).	After Kiosk hardening is enabled: the multitasking key, power menu, and pull-down status bar are blocked, and pressing the Home key only returns to the Kiosk desktop; «Pin to an app» is true locking (system task locking), so students cannot disable it themselves. It is not Android's «App pinned».
5	Launch apps remotely	T69: 1/1 passed; Samsung: 1/1 passed	Both tablets passed the criterion “Launching an app actually brings it to the foreground.”	Success means the app is open in the foreground on the tablet; the app itself handles whether it can connect to the internet and log in after opening. Under Kiosk, apps not listed on the home screen are correctly reported as failed.
6	Screen Control and App Pinning Lock	T69: 2/2 passed; Samsung: 2/2 passed	2 criteria (pin to app, remote screenshot received by server); both devices passed all	App pinning can be set for a duration (0 = until the teacher releases it; maximum 8 hours), and is automatically released when time is up. The tablet screen must be on to take a screenshot; student screens can only be viewed during class (the console rejects requests outside class time). Screenshot images are kept on the server for only about 2 hours (see Data Retention Overview).
7	Security, Hardware, and Content Classification Control Policies	T69: 5/5 passed; Samsung: 5/5 passed	Both devices passed 6 criteria (disabling Developer Options disconnects the debugging connection; this was not rerun today, but passed on 649 on 10/9)	Takes effect as soon as it is switched on and is restored as soon as it is switched off; when multiple policies are bound to the same group, switching one off leaves the other in effect (check the other policies in the same group first). Disabling Developer Options also disables USB debugging.
8	Completely block general web browsing, allowing only links opened within authorized educational apps	T69: 3/3 passed; Samsung: 3/3 passed	All 3 criteria (Chrome allowlist, hide browser and app store, ClassPad browser URL filtering): both devices passed all criteria	The allowlist applies to both Chrome and the ClassPad browser, while SafeSearch is enforced and incognito mode is disabled; embedded web pages in other apps are not managed. Typing text in the address bar searches Google; if Google is not on the allowlist, the request is blocked (this is not a fault).
9	Disable in-app purchases, ad pop-ups, pop-up windows, and access to the app store	T69: 4/4 passed; Samsung: 4/4 passed	Both devices passed all 4 criteria (after the store is hidden, in-app purchases cannot be initiated anywhere on the tablet)	In-app purchases: after the store is hidden, payments cannot be initiated anywhere on the tablet; ads are blocked by domain (family-filter DNS), so ads served from the same domain as the main content may not be blocked; floating windows are disabled using the system setting.
10	Hardware permission controls: disable the camera, microphone, Bluetooth, and USB ports; enable them only when explicitly required for a teaching activity	T69: 1/1 passed; Samsung: 1/1 passed	Both devices passed the criterion «Hardware restrictions are actually enforced through system user restrictions»	Camera, microphone, Bluetooth, and USB data are disabled, and students cannot re-enable them in Settings; classroom «Temporary access» is automatically revoked when the time expires, and is also revoked if nobody takes action.
11	Real-time device location, route tracking, and geofence management	T69: 3/5 passed, 2 not verified; Samsung: 4/4 passed	5 criteria: Samsung passed all; T69 cannot obtain GPS indoors, so precise location and continuous location are marked “Not verified”; the IP-based approximate location fallback was verified	A single location request may take up to 3 minutes; when satellite signals are unavailable indoors, report this accurately and provide an approximate network-based location (marked “≈”, and not used for geofence decisions). The shortest continuous-location interval is 5 minutes. Location history is retained on the server for 90 days, and alerts for 180 days.
12	One-click remote locking and secure data erasure	T69: 2/2 passed; Samsung: 2/2 passed	Both devices passed the 2 criteria (lock screen and unlock); factory reset was demonstrated only on our test tablet	After the screen is locked, students cannot unlock the tablet themselves. It can only be unlocked via «Unlock class» in the console (or automatically reclaimed at the end of class). A factory reset clears all data on the tablet and cannot be undone (demonstrated only on a test tablet).
13	Multi-tab concurrent access control	T69: 2/2 passed; Samsung: 2/2 passed	Both devices passed all 2 criteria (ClassPad browser, Chrome tab limit)	Limit: 1–100. The ClassPad browser cannot open tabs beyond the limit; when Chrome exceeds the limit, an overlay prompt appears. For the Chrome half of the test, the tablet must have classroom monitoring running unobstructed.
14	Automatic screen recording throughout / manual screen recording on demand	T69: 4/4 passed; Samsung: 4/4 passed	Both devices passed all 5 criteria (including retrieving playable MP4 recordings and recording this class session)	On-device recording captures one frame every 2 seconds (not a smooth video). Unless recordings are retrieved, they do not use the school network. Recordings are stored in ClassPad's private directory on the tablet, where students cannot view or delete them in Photos or the file manager. The tablet retains only the most recent 3 days, up to 1.5 GB (about 22 hours). Up to 4 hours can be retrieved at a time; recordings retrieved to the server are automatically deleted after 7 days, and can also be deleted manually. During recording, the student's notification shade continuously displays «The teacher is recording this tablet's screen». If no end time is specified, recording stops automatically after one class period of 45 minutes.
15	Content access control	T69: 6/6 passed; Samsung: 6/6 passed	Both devices passed all 6 criteria (keywords, categories, Kiosk, blacklist, time periods, Safe Search)	Category blocking and keywords apply to the ClassPad browser; categories such as social media are also added to the Chrome blocklist. Family filtering DNS applies to all apps on the entire tablet. The school network must allow port 853. If it cannot connect, report the failure accurately; it will not disconnect the network.
16	Web filtering system	T69: 3/3 passed; Samsung: 3/3 passed	All 3 criteria passed on both devices	The blocklist only blocks entries on the list; for a domain that is both allowed and blocked, its subdomains are blocked. «Check syntax» identifies blank lines, invalid wildcards, Chinese domains, and duplicates, and can fix them with one click.
17	A cloud-based virtual management console is provided; the entire solution is deployed on a cloud architecture	T69: 2/2 passed; Samsung: 1/1 passed	2 criteria (push channel, dashboard) passed; dashboard figures match the device list (consoleflow)	The entire solution is deployed in the cloud. Open the console in a browser; no software installation is required. Data is isolated between schools, so one school's account cannot view another school's tablets.
18	Full monitoring of student activity	T69: 2/2 passed; Samsung: 2/2 passed	Both devices passed all 2 criteria (usage duration, app list)	App usage duration is retained on the server for 365 days; the console shows the most recent 7 days by default. The app list is from the tablet's most recent report.
19	Centralized management of terminal devices	T69: 8/8 passed; Samsung: 8/8 passed	Both devices passed all 8 criteria (including complex passwords, Wi-Fi, APN, VPN, and scheduled power-off)	The lock-screen password can only use English letters, numbers, and English symbols (Android limitation); passwords containing Chinese characters or full-width symbols are correctly rejected. Brightness: 0–100%; volume: 0–15 (media volume). Scheduled power-on/off is only available on the factory-preinstalled version.
20	Classroom teaching management (real-time monitoring of student classroom behavior)	T69: 9/9 passed; Samsung: not in scope for this round	All 9 criteria passed (lock screens during class, push lesson materials, in-class quizzes, raise hands, end class, monitoring wall, teacher page on phone)	Viewing student screens and taking screenshots of the whole class are available only during class. When class ends, the lock, pin, and one-time temporary access for that class are all revoked. If no one ends class at the scheduled time, the server will end it automatically. Classroom interactions (screen broadcasting, classroom meetings, and file transfers over the LAN) require the teacher to run the teacher-side assistant on their computer.
21	Complete traceability records for all operations (operation details and timestamps retained in full)	T69: 1/1 passed; Samsung: not in scope for this round	Criteria «Operation Audit Page» and consoleflow “audit record immediately available after deployment” passed	Only write operations (deployment, modification, deletion) are recorded; queries are not. Password-like content is redacted. Operation audit records are retained for 365 days; deployment records for each device are retained for 90 days.
22	Control over web search permissions	T69: 3/3 passed; Samsung: 3/3 passed	All 3 criteria passed on both devices (enforce SafeSearch, disable Incognito mode)	Enforce SafeSearch and disable Incognito mode are deployed together with URL filtering. When URL filtering is turned off, SafeSearch is no longer enforced either.
23	Real-time Push Notifications / Messages	T69: 1/1 passed; Samsung: 1/1 passed	Both devices passed the criterion «Send message pop-up»; the customer acceptance group criterion «Display pushed courseware on the screen when locked» passed on T69	Pop-up messages remain on the tablet until the student taps «OK»; when courseware is pushed, the tablet screen turns on and displays it over the lock screen. Pushing a new file replaces the old one.
24	Application Lifecycle Management and Global Control Policy Configuration	T69: 7/7 passed; Samsung: 7/7 passed	Both devices passed all 7 criteria (install, uninstall, clear data, deploy and delete files, install blacklist, default launcher)	Apps on the blacklist are only disabled, not uninstalled (they are restored immediately when removed from the list); an app on the installation blacklist is removed as soon as it is installed. The maximum size of a single file in the file library is 512 MB. Files are not deleted automatically; they are only removed when deleted.
25	Brand-customized Interface Management	T69: 1/1 passed; Samsung: out of scope for this round	Criterion «Brand customization page» passed; brand in 3 languages 10/5 verified	Saving the brand will push it to all school tablets (not just one class); the name and icon of the management app itself on the tablets must be packaged separately.

II. Partially implemented (2 items)

Clause	Requirement	Two devices tested	Basis	Feature boundaries and notes
26	Supports global, group, and single-device data reports; Android zero-touch bulk deployment	T69: 2/2 passed; Samsung: out of scope for this round	2 criteria (report page, device setup page) passed; serial-number pre-import and automatic takeover on startup simulated and passed throughout on T69	Reports can be exported as CSV or printed as PDF for the entire school, a group, or an individual device. For zero-touch setup, devices are pre-imported by serial number; after a tablet is factory reset, it automatically joins the group when powered on and connected to the network. Google’s official Zero-Touch is not included this time.
27	Full user account management capabilities	T69: 1/1 passed; Samsung: out of scope for this round	5 accounts signed in through a browser, 10/10; all 9 consoleflow and roles criteria passed (teacher scope, read-only access, and inability to sign in after deactivation)	Teachers can only view and manage the classes they are authorized for; «Factory reset», «Unbind», and «Clear local policy» are grayed out for teachers. Read-only accounts can view the entire school but cannot make changes. Administrators cannot deactivate, downgrade, or delete themselves, and cannot delete the last administrator. Do not create multiple Android users on a tablet (one device per person).

III. Handling of customer test feedback from October 9

Item	Feedback and handling
1	10/9 School account sign-in failed: The test account’s email had not been verified in the original Auth0. We have switched to our own Auth0 instance and prepared the school accounts; see “Test Account and Sign-in Instructions”.
2	Exit without a password: Not reproduced on the test device; please provide details of the steps taken at the time. Child-friendly interface: Implemented in 656 (4.2.4.2).
3	Cannot hide «Set» due to a design limitation: hiding «Set» will cause the tablet to freeze on the next startup. Use Kiosk + hardening to prevent students from accessing settings.
4	The exit button was retained: Turn off «Show the exit-Kiosk button» in the policy to remove the exit option.
5	Successful acknowledgment = the app has opened. If a Google app cannot connect to Google servers after opening, that is due to the network environment, not a launch failure.
6	The screen cannot turn off: Please clarify whether this occurred while using a pinned app, a shared desktop, or screen recording. For accessibility, use the console to send «Complete guided setup» to trigger it with one click.
8	The whitelist is ineffective: Entering text in the address bar triggers a Google search, which is blocked. The configuration itself is correct; see Section 2 of 《Tender Clause Test Steps》.
11	For the demonstration, place the tablet by a window; when it cannot receive satellite signals indoors, it reports this accurately and provides a rough network-based location (≈ marker)
12	Secure data erasure is equivalent to restoring factory settings; all data on the tablet is cleared
14	Videos not being visible in the tablet's photo album is by design (they are stored in a private directory that students cannot delete); starting from 654, items from the same time period are not listed repeatedly and can be deleted
15	WeChat/QQ can be opened and pornographic content can be found in searches: starting from 654, the category list applies to Chrome as well, the social media list is supplemented, and Family Filter DNS enforces Safe Search
19	Complex password failure: fixed in 654
21	All deployment records are stored on the server; operation audit logs are retained for 365 days by default, not just in the page's dropdown
23	Courseware could not be updated: the screen did not turn on when the tablet was locked; 655 has been fixed
25	Saving the brand setting will push it to all tablets across the school; please take note during testing
26	Google Official Zero-Touch requires an authorized reseller channel and is not included this time; pre-import by serial number is used instead
27	Multiple Android users cannot be created on a tablet (one-device-per-person model); all other account management features are available; accounts can be deleted starting 10/10

IV. Data Retention Overview

Data	Where it is stored	How long / how much is retained	Who can view it and how to delete it
Screenshots (device details screenshot, whole-class screenshot, monitoring wall)	Server	About 2 hours: screenshots from more than 2 hours earlier are cleared every day at 04:30, so a screenshot is kept until no later than the early hours of the following day	Administrators and the teacher of the class can view them during class; they can also be cleared manually under «Storage usage»
Tablet recordings	Private directory on the student's ClassPad tablet (not visible in Photos or File Manager)	Most recent 3 days, up to 1.5 GB (about 22 hours); older recordings are automatically deleted when the limit is exceeded	Students cannot delete them; teachers can retrieve recordings for a specified time period
Recordings retrieved to the server	Server	Automatically deleted after 7 days	The «Recordings» tab in device details can play and be manually deleted
Location history	Server	90 days	Device details «Usage & location»
Alert records	Server	180 days	«Alerts & Compliance → Alert Logs»
App usage duration	Server	365 days (the console defaults to showing the most recent 7 days)	Device details, reports
Data usage statistics	Server	365 days	Reports
Command history (commands and acknowledgments for each device)	Server	90 days	Device details «Command history»
Operation audit (who did what, when, and to which device)	Server	365 days	«System Management → Operation Audit», can be filtered and exported
Logs and other files uploaded from tablets	Server	60 days	Device Details «Screenshots and files»
File library (course materials, etc.)	Server	Not deleted automatically; only removed when deleted; maximum 512 MB per file	«File Management → File Library»
Parent approval requests	Server	180 days (only resolved requests are deleted)	«Parent requests»

This report was generated from hands-on testing by the vendor using its own test tablets; no customer test devices were touched. See the regression report from the same day in the «Test Report» list on the Manual site for itemized criteria and screenshots.