# Policies **URL:** https://speciforum.org/c/policies/84.md [Latest](https://speciforum.org/latest.md) · [Categories](https://speciforum.org/categories.md) · [Tags](https://speciforum.org/tags.md) --- ## [About the Policies category](https://speciforum.org/t/about-the-policies-category/2624)
**Author:** [@system](https://speciforum.org/u/system)\ **Replies:** 0\ **Last updated:** [June 11, 2025, 5:30pm UTC](https://speciforum.org/t/about-the-policies-category/2624 "2025-06-11T17:30:14Z")
The Policies category brings together the core guidelines and procedures that shape SCC’s operational, technical, and security practices. It includes documentation on data protection, encryption, disaster recovery, incid… --- ## [Secure Coding Practices](https://speciforum.org/t/secure-coding-practices/2703)
**Author:** [@system](https://speciforum.org/u/system)\ **Replies:** 0\ **Last updated:** [June 30, 2025, 5:00am UTC](https://speciforum.org/t/secure-coding-practices/2703 "2025-06-30T05:00:00Z")
Dependency scanning and secret detection: We use GitGuardian to automatically detect secrets and credentials in the codebase before they reach production. Access control enforcement: Specify implements role-based access… --- ## [SCC Voluntary Product Accessibility Template (VPAT)](https://speciforum.org/t/scc-voluntary-product-accessibility-template-vpat/3816)
**Author:** [@lexiclevenger6](https://speciforum.org/u/lexiclevenger6)\ **Replies:** 0\ **Last updated:** [June 29, 2026, 7:22pm UTC](https://speciforum.org/t/scc-voluntary-product-accessibility-template-vpat/3816 "2026-06-29T19:22:36Z")
The Voluntary Product Accessibility Template (VPAT) is a standardized document used to evaluate how well information and communication technology products meet established accessibility criteria. It helps institutions un… --- ## [SCC Data Encryption Policy](https://speciforum.org/t/scc-data-encryption-policy/3813)
**Author:** [@lexiclevenger6](https://speciforum.org/u/lexiclevenger6)\ **Replies:** 0\ **Last updated:** [June 29, 2026, 4:36pm UTC](https://speciforum.org/t/scc-data-encryption-policy/3813 "2026-06-29T16:36:00Z")
1. Purpose The SCC Data Encryption Policy defines the encryption requirements used by the Specify Collections Consortium (SCC) to protect the confidentiality and integrity of member data stored, processed, or transmitted… --- ## [SCC Disaster Recovery Plan](https://speciforum.org/t/scc-disaster-recovery-plan/3812)
**Author:** [@lexiclevenger6](https://speciforum.org/u/lexiclevenger6)\ **Replies:** 0\ **Last updated:** [June 29, 2026, 4:35pm UTC](https://speciforum.org/t/scc-disaster-recovery-plan/3812 "2026-06-29T16:35:31Z")
1. Purpose The SCC Disaster Recovery Plan establishes the procedures and responsibilities required to restore SCC systems and services following a disruptive event. The plan ensures that SCC can recover hosted environme… --- ## [SCC Incident Response Plan](https://speciforum.org/t/scc-incident-response-plan/3811)
**Author:** [@lexiclevenger6](https://speciforum.org/u/lexiclevenger6)\ **Replies:** 0\ **Last updated:** [June 29, 2026, 4:35pm UTC](https://speciforum.org/t/scc-incident-response-plan/3811 "2026-06-29T16:35:15Z")
1. Purpose This Incident Response Plan establishes the processes the Specify Collections Consortium (SCC) uses to identify, analyze, contain, mitigate, and recover from security incidents affecting SCC systems or member … --- ## [SCC Data Protection Policy](https://speciforum.org/t/scc-data-protection-policy/3810)
**Author:** [@lexiclevenger6](https://speciforum.org/u/lexiclevenger6)\ **Replies:** 0\ **Last updated:** [June 29, 2026, 4:34pm UTC](https://speciforum.org/t/scc-data-protection-policy/3810 "2026-06-29T16:34:36Z")
1. Purpose The SCC Data Protection Policy defines how the Specify Collections Consortium protects the confidentiality, integrity, and availability of member data stored, processed, or transmitted through SCC systems and … --- ## [Accessibility & Compatibility Summary (WCAG 2.1 Level AA)](https://speciforum.org/t/accessibility-compatibility-summary-wcag-2-1-level-aa/2870)
**Author:** [@Grant](https://speciforum.org/u/Grant)\ **Replies:** 0\ **Last updated:** [September 12, 2025, 6:38pm UTC](https://speciforum.org/t/accessibility-compatibility-summary-wcag-2-1-level-aa/2870 "2025-09-12T18:38:56Z")
:gear: This document covers the accessibility and compatibility features of Specify 7. It serves as support documentation for users and assistive technology users. Specify is built with modern web standards (React, HT… --- ## [Patch Management and Security Update Policy](https://speciforum.org/t/patch-management-and-security-update-policy/2623)
**Author:** [@system](https://speciforum.org/u/system)\ **Replies:** 0\ **Last updated:** [June 11, 2025, 5:18pm UTC](https://speciforum.org/t/patch-management-and-security-update-policy/2623 "2025-06-11T17:18:46Z")
Patch Management and Security Update Policy at Specify Scope This document outlines how our team manages, prioritizes, and discloses vulnerabilities in the codebase. It covers the process from vulnerability identificat… --- ## [SCC Privacy Policy](https://speciforum.org/t/scc-privacy-policy/2699)
**Author:** [@system](https://speciforum.org/u/system)\ **Replies:** 0\ **Last updated:** [July 9, 2025, 5:43pm UTC](https://speciforum.org/t/scc-privacy-policy/2699 "2025-07-09T17:43:17Z")
Privacy Policy Effective Date: September 12, 2025 The Specify Collections Consortium (“SCC”, “we”, “us” or “our”) values the privacy of online visitors and members and is committed to protecting their personal informati… --- ## [Systems Development Life Cycle (SDLC)](https://speciforum.org/t/systems-development-life-cycle-sdlc/2700)
**Author:** [@system](https://speciforum.org/u/system)\ **Replies:** 0\ **Last updated:** [November 14, 2025, 6:00am UTC](https://speciforum.org/t/systems-development-life-cycle-sdlc/2700 "2025-11-14T06:00:00Z")
1. Planning and Requirement Analysis This phase is driven by a combination of community feedback, internal strategic planning, and agile development principles. Source of Requirements: Development priorities are formal… --- ## [Passwords in Specify](https://speciforum.org/t/passwords-in-specify/2702)
**Author:** [@system](https://speciforum.org/u/system)\ **Replies:** 0\ **Last updated:** [June 30, 2025, 5:00am UTC](https://speciforum.org/t/passwords-in-specify/2702 "2025-06-30T05:00:00Z")
Specify implements a secure, multi-step process for authenticating users locally, without relying on external identity providers (SSO can be configured). Local authentication is used for direct sign-in to Specify, indepe…