Is ScholarJMS GDPR compliant?

ScholarJMS is committed to GDPR compliance for journals serving EU users, DPDP Act 2023 compliance for India, and CCPA compliance for California. Compliance documentation — including a downloadable compliance declaration and security report — is available from this Trust Center.

Trust & Compliance Center

ScholarJMS is Built on Trust

We publish full transparency about our data practices, security controls, and regulatory commitments. Every journal hosted on ScholarJMS inherits these protections.

Regulatory Commitments

ScholarJMS is committed to the following data protection frameworks - operational and legal commitments, not just policy claims.

GDPR Committed

EU General Data Protection Regulation

European Union

DPDP Committed

Digital Personal Data Protection Act, 2023

India

CCPA Committed

California Consumer Privacy Act

California, USA

HTTPS Enforced

Encrypted connections across the platform

Platform-wide

ORCID Integrated

Verified researcher identities

Platform-wide

DOI Registered

Persistent article identifiers

Platform-wide

GIGW Compliant

Guidelines for Indian Government Websites

India — MeitY / NIC

WCAG 2.1 AA

Web Content Accessibility Guidelines

International

Security Controls in Place

Verified at the application level - not aspirational claims

CSRF protection on all state-changing operations

All data in transit is encrypted using industry-standard protocols

Uploaded files are validated for type and content before storage

Uploaded files are stored using system-generated names outside the public web directory

Sensitive credentials and API secrets are encrypted at rest

Role-based access control across all platform functions

Rate limiting on all authentication and registration endpoints

Security response headers applied to all platform responses

Payment processing handled by a certified third-party provider - no card data stored by this platform

Researcher identity verification via ORCID OAuth

Protection against unauthorised bulk data modification on all records

Session identity regenerated on login to prevent session fixation

Password reset is timing-safe to prevent account enumeration

GIGW-compliant accessibility toolbar on all journal pages (text resize + high contrast)

Skip navigation link on every page for keyboard and screen reader users

Semantic HTML5 landmarks — screen reader navigation across all themes

Accessibility Statement published per GIGW and WCAG 2.1 AA requirements

GIGW & WCAG 2.1 AA Accessibility

Guidelines for Indian Government Websites — MeitY / NIC

Every journal hosted on ScholarJMS meets the Guidelines for Indian Government Websites (GIGW) and WCAG 2.1 Level AA accessibility standards — mandatory for all Indian government-affiliated academic publications and best practice globally.

Text resize controls (A / A / A) on every page — up to 125%

High contrast mode toggle available platform-wide

Skip to main content link on every page

Semantic HTML5 landmarks for screen reader navigation

ARIA labels on all navigation, dialogs, and toolbars

Keyboard-accessible — full navigation without a mouse

Colour contrast ratios ≥ 4.5:1 for normal text

Accessibility Statement published at /accessibility-statement

Grievance redressal contact available on every footer

Sitemap linked from every journal footer

View Compliance Certificate including GIGW

Download Documentation

Share with your institution, reviewers, or compliance team. Opens in a new tab - use browser Print → Save as PDF.

PDF

Compliance Certificate

Platform compliance declaration covering GDPR, DPDP, and CCPA commitments and the security controls in place.

View

PDF

Security Assessment Report

Platform security assessment covering authentication, data handling, file uploads, encryption, and payment controls.

View

Responsible Disclosure

If you discover a security vulnerability in ScholarJMS, please report it responsibly. Do not exploit or disclose it publicly before we have had a chance to address it.

Report Security Issues

inquiry@ojscloud.com

Subject: "Security Vulnerability Report"

Response Commitment

We respond within 72 hours

Valid reports acknowledged and credited

ScholarJMS Trust Center · Last reviewed August 2026

Security & Compliance FAQ

Common questions about data protection, access controls, and compliance on ScholarJMS.

Where is my journal's data stored?

ScholarJMS data is stored on managed cloud infrastructure operated by Sequence Research & Development Private Limited, headquartered in India. All data in transit is encrypted using HTTPS. Sensitive fields — including credentials and API secrets — are encrypted at rest.

Who can access my journal's content?

Access is role-based and journal-isolated. Only editors and administrators assigned to your specific journal can access it. Reviewers see only the articles assigned to them. Authors see only their own submissions. ScholarJMS staff do not access journal content except for technical support purposes when explicitly requested by the journal editor.

How are security vulnerabilities handled?

Security patches are applied by the ScholarJMS engineering team and deployed automatically to all journals on the platform. Unlike self-hosted platforms, journals on ScholarJMS do not need to apply updates manually. To report a vulnerability, email inquiry@ojscloud.com with the subject "Security Vulnerability Report" — we commit to a response within 72 hours.

Does ScholarJMS store credit card data?

No. Payment processing is handled by a certified third-party payment provider. ScholarJMS does not store, process, or transmit credit card numbers at any point. No card data ever touches the ScholarJMS platform.

View full security documentation →