---
title: "📋 Security Policies"
url: "https://support.ftapi.com/en/article/-sicherheitsrichtlinien"
language: "en"
last_updated: "2026-06-22T07:11:36.837Z"
---

# 📋 Security Policies

Manage global security settings for your organization through the Security Policies section.

Through "Security Policies", global security settings can be configured for your organization.

-   Under "General", a password policy can be set for login and SecuPass.
-   Under "Captcha", captcha settings for login and SubmitBox can be managed.
-   And via "Reviewing", advanced settings for the virus scanner can be configured.

> **Note:** If you would like to use the 'Virus Scanner' add-on, [contact your FTAPI representative](https://services.ftapi.com/v2/#book/category/3/service/10/count/1/).

## General

### **Policy for passwords & SecuPass**

As an administrator, you can define how complex the password and SecuPass of users must be via a password policy.

The policy is set as a regular expression (Regex).

> **Note:** For all customer systems set up on or after **March 19, 2025**, a password policy for passwords and SecuPass is enabled by default.

  
**Currently recommended password policy** (= standard for new customer systems from March 19, 2025) 

Password contains:

-   min. 8 characters, max. 100 characters
-   min. 1 x lowercase letter,
-   min. 1 x uppercase letter,
-   min. 1 x number,
-   min. 1 x special character from: \[-~\`!@#$%^&\*()\_+=|\\/?.>,<;:”’\]

Regex: ^(?=.{8,100}$)(?=.\*\[a-z\])(?=.\*\[A-Z\])(?=.\*\[0-9\])(?=.\*\[^\\w\\s\]).\*  
  
Further explanation of the regular expression / Regex syntax can be found [here](https://en.wikipedia.org/wiki/Regular_expression).

### **Time limit for confirmation links**

Use this value to define the time frame within which the recipient's confirmation (e.g., for a data room invitation) must occur.

![](https://cdn-assets.productfruits.com/2004be00-e5b2-4b9c-b163-b99c1320aedd)

## Captcha

To protect user accounts, a captcha challenge is triggered after failed login attempts. Additionally, the captcha challenge can be activated for SubmitBox (to prevent spam and DDoS).

### **Maximum number of failed attempts**

Number of failed login attempts before the captcha challenge is required. The default value is '3'.

### **Captcha for SubmitBox ticket**

If activated, a captcha challenge will be triggered globally for all SubmitBox submissions in the organization. This is disabled by default.

![](https://cdn-assets.productfruits.com/421a1225-a4b1-4f4a-86dd-f27fd75ab1ef)

## Reviewing

### **Send notification email for delivery check incidents to**

Here you can specify email addresses to which a notification will be sent in the event of a violation of the security policies.

### **Block deliveries if check fails**

If the system used for checking (e.g., virus scanner) is unavailable or if an error occurs during the check, you can define here whether deliveries should be blocked or allowed to pass.

![](https://cdn-assets.productfruits.com/62400997-3ffa-4f74-ab63-3688a03e1e28)