Skip to main content

Website Standards

All websites and web applications at BYU should adhere to these standards. BYU is providing two website platforms that adhere to these standards as far as possible. These are Brightspot for most websites and Mendix for web applications.


Information security standards are maintained by BYU’s Chief Information Security Officer (CISO). Security standards cover endpoint, server, application, database, and cloud security.

Applicable policy: Information Security and Appropriate Use Policy

Standards: Minimum Security Controls for IT Resources


Privacy standards are maintained by BYU's Chief Information Privacy Officer.

Applicable policy: Information Use, Privacy, and Security Policy

BYU Privacy Notice

Instructions on Privacy Compliance for BYU Websites


Web accessibility standards are recommended by the University Accessibility Center and established by BYU’s Student Life Vice President. These standards cover all content presented on a web site or web application.

Applicable policy: Web Accessibility Policy

Standards: University Web Accessibility Guidelines


Branding standards are established by BYU’s Advancement Vice President.

Standards: BYU Brand Guide


All websites should adhere to copyright laws and policies. Please make sure to use only images, videos, text, etc. that are permissible for use. Visit the for more details or questions.

BYU photo has many great images to use for BYU websites at


Websites that accept payment or link to pages that accept payment must be PCI compliant.

Ways to accept online payments at BYU

Implementing Procedures

Brightspot and Mendix are the university's standard solutions for meeting each of the policies and standards listed above. Please contact the BYU Websites Manager ( to schedule your website migration or to ask further questions.