Owner of the digital solution

WMO and NORCAP

Type

Multilateral

Open alternatives

ClimWeb does not rely on any closed-source or proprietary components as mandatory dependencies for its core functionality. References to Google Translate and YouTube relate exclusively to optional, front-end integrations used for content display and user convenience. These services are not required for ClimWeb to operate and can be disabled or replaced without affecting any core system functionality. Translation: The Google Translate widget is an optional client-side integration. ClimWeb fully supports multilingual content management natively, allowing all content to be authored, managed and displayed in multiple languages without reliance on external translation services. Where automatic translation is desired, open-source or self-hosted alternatives (e.g. LibreTranslate, Argos Translate, Marian NMT) can be used instead. Video hosting: YouTube embeds are optional and used only for hosting multimedia content. ClimWeb equally supports self-hosted video files and open-source or federated alternatives (e.g. PeerTube) with no loss of functionality. In all cases, ClimWeb remains fully cloud-agnostic, platform-independent, and deployable on-premises, with no mandatory proprietary dependencies.

Collects or uses non-PII data and/or content

Yes

Mechanism for extracting or importing non-PII data

Privacy and Law Compliance

Best practices

Accessibility Testing/ Compliance, Test Driven Development, Privacy by Design, Scalability and Performance/ Scaling and Optimization, Change Management using Version Control, Responsive, RESTful APIs, Code Review, Continuous Integration / Continuous Deployment

Open standards

Content

Content is collected stored and distributed.

Types of content

Mechanisms to handle inappropriate and illegal content

1. Policies for Identifying Inappropriate/Illegal Content: Clear categorization of inappropriate vs. illegal content Specific focus on meteorological/institutional context Zero tolerance for illegal content (especially CSAM) Professional standards framework for institutional content 2. Mechanisms for Detection, Moderation, Reporting, and Removal: Detection: Both automated (filtering, image recognition) and manual (review workflows, user reports) Moderation: Multi-level approval processes, role-based controls, and trained human moderators Reporting: Internal staff tools, public reporting mechanisms, and legal compliance procedures Removal: Immediate removal for illegal content, standard investigation processes, and technical removal capabilities Key Strengths: Institutional Context: Tailored for meteorological/environmental organizations Legal Compliance: Specific procedures for CSAM and other illegal content Flexibility: Adaptable to local laws and cultural contexts across 27+ countries Technical Implementation: Built on proven Django CMS framework with robust logging Professional Standards: Focus on scientific accuracy and public service mission

Allows user interaction

Yes

Mechanisms to protect users and contributors

ClimWeb Harassment Protection Framework 1. Policies and Protection Processes for Users and Contributors Comprehensive Code of Conduct Professional Standards for All Users Institutional professionalism: Appropriate conduct for government meteorological staff and public users Scientific integrity: Accurate, evidence-based communication in all interactions Respectful communication: Professional courtesy in comments, feedback, and public interactions Public service ethics: Maintaining appropriate standards when engaging with community members Educational focus: Keeping interactions relevant to meteorological and climate information Prohibited Behaviors Across All Interaction Types Harassment and intimidation: Personal attacks, bullying, or threatening behavior in any platform feature Inappropriate content: Sexual harassment, hate speech, or discriminatory language in comments or forms Spam and abuse: Misuse of contact forms, event registrations, or feedback mechanisms Professional misconduct: Staff abuse of administrative privileges or inappropriate use of internal messaging Privacy violations: Sharing personal information without consent through any platform feature Protection Mechanisms by Interaction Type Public-Facing Features Protection Event Registration Forms: Form validation: Technical controls preventing spam or inappropriate submissions Professional oversight: Staff review of all registration submissions Data protection: Secure handling of participant information Anonymous reporting: Options for reporting concerning behavior during events Survey Participation and Feedback Collection: Content review: Staff monitoring of all survey responses and feedback Anonymous options: Protected participation without revealing personal information Response filtering: Automated detection of inappropriate or abusive content Professional mediation: Staff oversight of feedback review and response Contact Forms for Public Inquiries: Spam filtering: Automated detection of malicious or inappropriate messages Priority routing: Urgent safety concerns directed to appropriate staff Response protocols: Professional handling of all public inquiries Escalation procedures: Clear processes for concerning communications Internal Staff Collaboration Protection Editorial Workflows: Role-based permissions: Controlled access preventing unauthorized content changes Audit trails: Complete logging of all editorial actions and communications Supervisor oversight: Management review of staff interactions and content decisions Professional mediation: Institutional conflict resolution for editorial disputes Internal Messaging: Professional use only: Clear guidelines limiting internal communications to work-related topics Message monitoring: Administrative oversight capabilities for inappropriate use HR integration: Direct connection to institutional human resources for workplace issues Privacy controls: Secure, encrypted internal communications Collaborative Content Creation: Version control: Protection against malicious editing or content sabotage Access logging: Complete records of who edited what content when Conflict resolution: Clear procedures for resolving content disagreements Backup systems: Content recovery capabilities for damaged materials Community and Professional Engagement Protection Public Participation in Educational Programs: Supervised sessions: Professional staff oversight of all public educational events Group interactions: Focus on group rather than individual communications Professional boundaries: Clear guidelines for appropriate public engagement Incident reporting: Procedures for addressing inappropriate behavior at events Stakeholder Feedback on Weather Services: Professional mediation: Staff-mediated interactions with external stakeholders Structured feedback: Formal processes limiting opportunities for harassment Documentation: Records of all stakeholder interactions for accountability Escalation protocols: Clear procedures for problematic stakeholder behavior User-Generated Content (Surveys, Comments, Community Input): Moderation system: All user-generated content reviewed before publication Content guidelines: Clear standards for appropriate community contributions User reporting: Easy mechanisms for reporting inappropriate content Response procedures: Professional handling of community concerns Professional Networking Among Meteorological Professionals: Professional standards: Code of conduct for inter-agency and professional communications Institutional oversight: Administrative monitoring of professional networking activities Conflict resolution: Procedures for addressing professional disputes Resource sharing: Secure channels for appropriate professional collaboration Response and Enforcement Procedures Multi-Level Response System Immediate Actions: Content removal: Instant deletion of clearly inappropriate material User blocking: Temporary restriction of access for problematic users Staff notification: Immediate alerts to administrators for serious incidents Evidence preservation: Automatic backup of reported content for investigation Investigation Procedures: Professional review: Institutional staff assessment of reported incidents Fair process: Opportunity for all parties to provide information External support: Connection to HR, legal, or law enforcement when needed Documentation: Complete records maintained for institutional accountability 2. Safety and Security of Underage Users Mixed Access Environment Protections Public Access with Enhanced Monitoring Educational Content Access: Age-appropriate content: All public materials suitable for educational environments Supervised browsing: Encouraging parental or teacher supervision for educational use No registration required: Minors can access educational content without providing personal information Safe content standards: Extra review for any content accessible to educational users Limited Interaction Capabilities: Moderated comments: Enhanced review for any public comments from educational users Educational event focus: Public events designed for supervised educational participation Group participation: Event registrations handled through educational institutions No direct messaging: Minors cannot access internal messaging or direct communication features Enhanced Protection Protocols Supervised Educational Engagement: Institutional partnerships: Formal agreements with schools and educational organizations Adult supervision required: All minor participation must include qualified adult oversight Group settings prioritized: Educational programs designed for classroom or group participation Professional boundaries: Clear staff guidelines for appropriate interactions with educational groups Technical Safeguards: Enhanced content filtering: Additional screening for content accessible to minors Session monitoring: Technical oversight of educational access patterns Limited feature access: Educational users cannot access advanced interactive features Parental notification: Information provided to parents/teachers about platform use Staff Training for Educational Interactions Professional Development: Child protection training: Required training for staff involved in educational outreach Appropriate boundaries: Clear guidelines for professional interactions with educational groups Recognition training: Education on identifying concerning behavior or safety issues Reporting obligations: Understanding of legal requirements for child protection Implementation Across Platform Features Feature-Specific Protections Comments and User-Generated Content (Educational Context): Teacher mediation: Educational submissions reviewed through qualified educators Group submissions: Individual comments discouraged, group feedback preferred Content appropriateness: Extra screening for educational-context submissions Response protocols: Professional, educational-focused responses only Events and Surveys (Educational Participation): Institutional coordination: Educational participation coordinated through schools/institutions Parental consent: Required permissions for educational event participation Supervised activities: All educational events include qualified adult supervision Age-appropriate design: Events and surveys designed for educational environments Contact Forms (Educational Inquiries): Educational context identification: Special handling for inquiries from educational institutions Parent/teacher mediation: Direct communications discouraged, institutional contact preferred Professional response: Educational inquiries handled by qualified institutional staff Follow-up protocols: Appropriate institutional follow-up procedures for educational requests Emergency and Support Procedures Crisis Response: Immediate escalation: Direct procedures for urgent safety concerns involving minors Professional networks: Connection to child protection expertise within institutional systems Legal compliance: Full adherence to national child protection reporting requirements Documentation protocols: Proper evidence preservation for any investigations Ongoing Support: Educational partnerships: Continued coordination with schools and educational authorities Parent/teacher resources: Information and support for educational use of platform Professional consultation: Access to child safety expertise for staff guidance Policy updates: Regular review and updating of educational use policies https://github.com/wmo-raf/climweb/blob/main/CODE_OF_CONDUCT.md