Platform Compliance Declaration

This certificate confirms that the ScholarJMS Platform has implemented the data protection controls and regulatory commitments described herein, as verified through internal application-level assessment.

Certificate Ref

SJ-COMP-2026-08

Issued

11 August 2026

Valid Until

11 August 2027

Regulatory Framework Commitments

GDPR

General Data Protection Regulation

European Union · Since 2018

DPDP

Digital Personal Data Protection Act, 2023

India · Since 2023

CCPA

California Consumer Privacy Act

California, USA · Since 2020

Implemented Security Controls

CSRF protection on all state-changing operations

All data in transit encrypted using industry-standard protocols

Uploaded files validated for type and content before storage

Uploaded files stored using system-generated names outside the public web directory

Sensitive credentials and API secrets encrypted at rest

Role-based access control across all platform functions

Rate limiting on all authentication and registration endpoints

Security response headers applied to all platform responses

Payment processing by a certified third-party provider - no card data stored by this platform

Researcher identity verification via ORCID OAuth

Protection against unauthorised bulk data modification on all records

Session identity regenerated on login to prevent session fixation

Password reset is timing-safe - no account enumeration possible

DOI registration for published articles where applicable

Scope: This certificate covers the ScholarJMS multi-tenant journal management platform, including all tenant journals hosted thereon. The controls listed are verified at the application code level. Separate infrastructure-level protections are independently maintained at the hosting layer and complement the controls documented here.

ScholarJMS Platform

Issuing Authority

Internal Security Review

Assessment Method

This is an internal platform compliance declaration. · Ref: SJ-COMP-2026-08