Sharebar?

IMS App Vetting Rubric (Preview)

IMS App Vetting Rubric

The following rubric may be used as a guide while vetting applications. 

The rubric is still in draft format and only available to IMS members.  Feedback on the rubric may be sent to appvetting@imsglobal.org

Data Collected

Does Not Meet Expectations Meets Expectations (Reservations) Meets Expectations
This section of the rubric covers what data the supplier collects. Specifically, what information a user is required to input and how the user can interact with their own data. The policy does not meet the criteria established by the rubric. The policy is unclear as to what it may or may not do as established by the criteria in the rubric. The policy fully meets or exceeds the criteria established by the rubric.

Security

Does Not Meet Expectations Meets Expectations (Reservations) Meets Expectations
This section of the rubric covers all of the supplier's back-end security policies and practices. Specifically, it addresses encryption, cookies, and authentication. The policy does not meet the criteria established by the rubric. The policy is unclear as to what it may or may not do as established by the criteria in the rubric. The policy fully meets or exceeds the criteria established by the rubric.

Third-Party Data Sharing

Does Not Meet Expectations Meets Expectations (Reservations) Meets Expectations
This section of the rubric covers all third-party interactions with the supplier and user’s data. This section also addresses the selling or sharing of user data. The policy does not meet the criteria established by the rubric. The policy is unclear as to what it may or may not do as established by the criteria in the rubric. The policy fully meets or exceeds the criteria established by the rubric.

Advertising

Does Not Meet Expectations Meets Expectations (Reservations) Meets Expectations
This section of the rubric covers how the supplier manages advertisements and whether or not there is ad targeting or tracking. The policy does not meet the criteria established by the rubric. The policy is unclear as to what it may or may not do as established by the criteria in the rubric. The policy fully meets or exceeds the criteria established by the rubric.