Brand Execution Guidelines banner image

Brand execution guidelines

Web standards checklist

One of the many ways Arizona State University advances the university mission is through the construction of a best-in-class, cohesive and intuitive web experience for the diverse audiences ASU serves.

Through the implementation of data-driven web standards and guidelines, the university deploys highly effective strategies for information architecture, design, web analytics, content, search engine optimization and security.

Reviewing this checklist before beginning the design and development of a new site, as the site is being created and as a final QA check before launching will help ensure your new (or updated) site aligns with the standards and guidelines set for asu.edu.

The list includes source links and process recommendations. If you have questions that you’re unable to resolve using the included reference links, ask your questions in the ASU web community Slack channel.

Note: The launch of your site will be delayed if the site does not meet standards. Printing this list to work through may be helpful to ensure your site meets standards.

 

New standards for asu.edu were set as part of the Web Standards 2.0 project in FY21. All new sites must adhere to these standards.

 

asu.edu URLs

  • The URL structure and format follows the guidelines and standards set for asu.edu.
    • Site must use an “asu.edu” subdomain.
    • All asu.edu subdomains are granted on a case-by-case basis.
  • If new, the proposed URL has been approved by the ASU Web Standards Governance Board prior to inclusion in any communications or marketing materials. Request an asu.edu subdomain.
    • All asu.edu sites will be reviewed by the ASU Web Standards Governance Board prior to launch.
    • The launch of sites that do not meet the standards listed in this checklist will be delayed pending discussions regarding standards alignment with requestors.
  • Website URL and contact details have been added to ASU’s official website inventory.


     

Site settings

  • Uses the ASU standard favicon.
    • The favorite icon, also known as a favicon, can be seen in the browser address bar, your favorites list, search engine results and will display in tabs on certain browsers. 
    • The standard for asu.edu is the full-color ASU logo on a white background. 
    • No pitchfork or other favicon may be used. 
    • Link to use for the asu.edu favicon: https://www.asu.edu/themes/custom/asu_edu/favicon.ico 

      Example:


      Favicon Example

Design

UI kit

  • Utilizes the UI kit for asu.edu.

     

  • UI kit components have not been altered and follow the proper specs as listed in the UI Kit.
  • Components designed that are not currently in the UI kit must follow the base design standards of the UI kit — spacing, fonts and typography, links, color palette, backgrounds, etc.

Fonts and typography

  • Arial is the only font in use (View font family guidelines).
    • In case Arial cannot load, the font stack is: Arial, Helvetica, “Nimbus Sans L”, “Liberation Sans”, FreeSans, sans-serif.

       

       

  • No alternative fonts should be introduced, including serif and script fonts used for decoration in images, video or otherwise.

Text formatting

  • All text is left aligned for improved readability by all sighted users.
  • Text, in any use, does not extend beyond 700px wide to meet accessibility standards for all readers.
  • Body copy is at least 16px or 1em/rem (View font size guidelines).
  • Does not use italics, which are not part of ASU writing style (View ASU writing style).
  • Does not use underlines for non-linked text. Underlined text indicates a link on the web.
  • Maroon text is only used to indicate a link in live page text. Maroon text cannot be used in any other scenario.
  • Text is not placed over a pattern without a highlight (See guidelines for patterns).

Spacing and layout

Color and backgrounds

 Icons

  • Icons used are from Font Awesome free version (View icon library).
    • Custom icons should build from Font Awesome elements to ensure the consistency in the visual style of icons across ASU web projects.
  • Icons are approved color options (View icon color combinations).
  • Icons used in content as links should be ASU maroon.
  • Icons used in buttons follow the same button color standards as text buttons.

Links, buttons and focus states

  • External link indicator icons are not used for any link to an asu.edu page (See external link styling for inline links). This is because users see asu.edu as one website.
  • All links open in the same tab or browser window rather than a new tab or browser window. 
    • Users are most likely to use the browser's back button to return to a previous page.
  • All inline links are underlined.
  • All inline links are a different color than the surrounding text per the standard background color and link color combinations and WCAG AA standards.
    • When grouping together similarly formatted links in a menu, users understand the menu text as links and do not require an underline in the default state. For this reason, the following components do not use default underline links: 

Writing style

The following are based on ASU writing style, which is the Associated Press Stylebook (AP style) with a few university-specific variances. 

  • Does not use serial commas — apples, oranges and bananas NOT apples, oranges, and bananas (View punctuation guide).

     

  • All headings and titles are Sentence case, with only the first letter of the first word capitalized in addition to any proper nouns (View capitalization guide).
  • All menu text is Title Case, with the first letter of each word capitalized. Do not capitalize shorter words (e.g., "and," "or", "on," "at", "a," "the") unless they are the first word in the title.
  • Does not use +, @, & or / unless part of an official name (View symbols guide).
  • Does not use ALL CAPS unless part of an official name (View capitalization guide).
  • Uses single spaces after periods between sentences (View formatting guide).

Buttons

See the Unity Design System UI kit for specs.

  • No drop shadows, design elements or alternative formatting should be introduced.
  • Button hover state is that the button grows 5% in scale — text color does not change and text is not underlined.
  • Buttons use sentence case — the first letter of the first word is capitalized.
  • Button text is left aligned.
  • Gold buttons should be reserved for the most important call to action on each page.
  • Call to action (CTA) button labels need to be actionable, concise and specific. Avoid using vague, default button labels such as “Learn more”, “Read more” or “Click here”. 
    • Using vague, default button labels goes against best practices for accessibility and SEO. 
    • Button labels should describe what users will be doing or where they will be going.
    • An example of a specific, actionable label is “Read the brand guidelines”.
    • Button labels should not exceed one line in desktop and mobile.

Photo and video

See UDS UI kit for image and video specs.

Photos

  • Images should be jpg or png files.
  • Images should be compressed to optimize page load speeds.
    • Compressor.io is a free image compression tool.
    • Images should be no larger than 2MB, ideally no larger than 1MB
    • Use webp files where accessible.
  • All images require the use of alt text for both accessibility and search engine optimization.
    • Text should contain descriptive/meaningful of what’s displayed in the image for both screen readers and search engines. 
    • An example of effective alt text is “ASU Tempe Campus map”.
    • Read more about writing effective alt text.
  • Image file names should be meaningful and can include keywords to benefit SEO.
    • An example of a meaningful image file name is asu-tempe-campus-map.jpg
  • Static images do not contain text that is not included in an alt tag or elsewhere on the page (this is an accessibility violation).
  • Imagery should be meaningful, relevant, high-quality, and authentic. Users should be able to connect the imagery with the content. Pre-approved, high-quality images can be found in the ASU Brand Library

Videos 

See ASU's video standards

  • Videos embedded on asu.edu should be hosted on YouTube, except for hero videos (View the video guide).
  • All videos with audio have captions available.
  • All videos need to have a play and pause button for accessibility, including hero videos. 

Search engine optimization (SEO)

See the steps for implementing ASU’s SEO strategy.

  • Customize robots.txt for search engine optimization. 
    • Robots.txt is a file in the root of your Drupal install that tells search engine crawlers what to index on your site. By default, crawling is disabled on Dev and Test and enabled on Live. If you’re doing a soft launch and don’t want the live environment to be indexed you will need to customize your robots.txt on Dev and pull it to Test and then pull it to Live.
  • Once launched, submit your sitemap to Google via Google Search ConsoleLearn how
    • Each site should have a sitemap that only lists the crawlable pages.
  • Ensure your URLs are readable and meaningful for the content of the page and do not include nondescript terms like ‘node’.
  • Each page has a unique title tag and meta description specific to the page.
  • Each page should have a canonical URL to itself OR to the page that originally had the content.
    • The canonical tag tells search engines what URL should be considered the definitive version for a page’s content.
    • This can help avoid duplicate content issues from the same content appearing on technically different URLs.
    • Define canonical tags for any URLs that house the same content as another. For example, if you have a printer-friendly version of a web page, be sure its canonical tag points to the original page. 

       

  • Each section on a page has a header, and pages should have the proper H1, H2, H3 structures within each section. Learn more about HTML headings.
    • Headings should follow a logical hierarchy. 
      • All headings should be followed with content with the exception of heroes.
      • For example, don't use a level-four heading directly after a level-two heading merely because it looks better. Instead, use the correct level-three heading—then if you don't like the look of it, alter its appearance with WYSIWYG (rich-text) editor options (or in the CSS).
For example: Heading 1, Heading 2, Heading 2, Heading 3, Heading 2, Heading 3

 

  • Images have short descriptive names and alt text.
  • Image file names should be meaningful and can include keywords to benefit SEO (Learn more about file names for SEO).
    • An example of a meaningful image file name is "asu-tempe-campus-map.jpg"
  • Ensure all links and CTA buttons are labeled with specific, actionable statements rather than vague labels such as “Here”, “Click here”, “Read more” or “Learn more”.  
    • A good example of a specific, actionable label is “Read the brand guidelines”.

Quality of content evaluation

  • All content is accurate, timely and free of error.
  • Editing and styling are consistent including the case for titles (see ASU writing style).
  • All links work and are error-free.
  • Information on the homepage and high circulation pages such as about sections, faculty and home sections communicate quality statements such as rankings, faculty accomplishments and points of pride.
  • Photography and videography selections are brand-aligned and project a positive image of the university.

Mobile optimization

  • All Unity Design System components are responsive and have a mobile-specific version.
    • This free browser extension can be used to simulate mobile experiences on desktop browsers.
  • Put content first and remove navigational barriers to information to help improve conversions.
  • Make content glanceable and primary content primary. You must continue to ask how you can engage the user through mobile experiences. You must find a more beneficial way to display specific content for mobile.
  • When testing, check each page with Google's Mobile Friendly Test, Lighthouse and Google Pagespeed Insights to verify a mobile-friendly design.

Google Analytics and Tag Manager

  • Site is either Webspark or uses the Unity header component, which includes ASU’s deployment of Google Tag Manager and Google Analytics Premium. Review the ASU header guide

Accessibility

ASU is committed to making the asu.edu domain accessible to people of all abilities. As part of that commitment, ASU's Unity Design System has been optimized for and is routinely tested for accessibility. You can get more detailed information on digital accessibility on ASU IT Accessibility

The
ASU IT Accessibility Standard is ASU's commitment to meeting the Web Content Accessibility Guidelines (WCAG) 2.1 level AA, the legal standard for U.S. public websites.

Please note:
ASU does not permit the use of accessibility overlays, which often lead to more accessibility barriers.

To test websites and applications for accessibility, semi-automated accessibility checkers such as the
Siteimprove and WAVE browser extensions can be helpful. However, automated tests identify less than 25% of issues, so ASU also requires manual testing. 
 

Accessibility checklist

The ASU Web Accessibility Audit Tool is a step-by-step guide to help you learn to manually audit your own webpages.
 

Or use this simplified checklist to audit your site or app for nine important accessibility issues:

Request for information on degree detail pages

For college/academic unit websites:

  • Every degree detail page has a request for information form (RFI) at the bottom of the page.
  • Every form field should have a label on top of the text box (View examples of how form fields should be designed).
  • All required form fields should be indicated with a maroon dot before the field label (View examples of how form fields should be designed).

     

  • A button may be used on the top 1/3 of the page that links to the form below.

     

  • The default selection in the “My programs” field in the RFI matches the subject of the degree detail page.

     

  • Upon completion of the form, users should receive a confirmation message.
    • A unit can customize that confirmation message to be specific to that unit.

Development and hosting

  • When creating a new site in Pantheon, please select the Webspark 2 custom distribution that is offered when you are first setting up the site to be created. (Pantheon will be replaced by Acquia in May 2025).
  • Review Pantheon workflow and create test and live guides.
  • When adding custom code or upgrading a module, be sure to:
    • Make changes in the Dev environment first.
    • Deploy code from Dev to Test.
    • Confirm everything is working in Test, then deploy code to Live. View Pantheon Workflow.
    • Keep your site connection mode in Git and apply updates promptly.
    • In Git mode, updates will appear automatically on your Pantheon dashboard.
    • Apply any pending updates as soon as possible.
  • Use the Pantheon Backups Tool to manually backup the environment every time you pull code, database or add files.
  • Ensure your site content is ready to “Go Live” before submitting your launch request form using your Live Pantheon environment.
    • Allow 3-5 business days for a site request to process and provide sufficient time for the request to be received.
  • When replacing an old site and redirecting traffic to the new one, set up a 301 redirect.
    • A site redirect indicates that a page has moved. Redirects are helpful for smooth transitions, site standardization, and search engine optimization (SEO). Additionally, ASU policy requires that your site redirect HTTP traffic to https. For guides on redirect settings, use the sites/default/settings.php and under Pantheon/Domains/ under Modules and Plugins.
  • Set up automatic backups on the Pantheon dashboard
    • With a free Dev site, you can manually create backups. With a paid plan, you can enable automated backups. Backups are not saved indefinitely and we encourage you to download backups periodically.
  • Set Drupal Performance and Caching Settings: Enable caching and CSS and JS optimization for performance.
    • Configure performance settings in your Live environment so your site will be as fast as possible. In some cases, caching may break certain dynamic functionality, but we recommend first trying to enable all caching, and only disable it if absolutely necessary.

       

  • Request vulnerability scanning.
    • Contact the ASU security scan team to coordinate an assessment of your development site. Security scan results will identify medium and high vulnerabilities that you should address prior to launch. Visit getprotected.asu.edu for information on vulnerability management.

Security

  • Update all Webspark releases in a timely manner to avoid security vulnerabilities.
    • Webspark releases are scheduled quarterly during the calendar year unless otherwise notified by Enterprise Technology via the ASU web community Slack channel.
  • All sites should force HTTPS (SSL encryption of traffic).
  • All sites should perform a security vulnerability scan and fix all medium and high vulnerabilities that are found. Visit getprotected.asu.edu for information on vulnerability management.
  • Any site with a login (for users or admins) should use CAS, i.e. no local account login.
    • Drupal sites should redirect local login to CAS.
  • Sites should avoid creating local accounts. Any site that must create local accounts or authorizations should have a means of cleaning those up as people leave the university or their site role ends.
  • Any site handling sensitive data should: (see https://tech.asu.edu/security-policies/policies)
    • We advise against storing sensitive data in your sites, but if it is critical for your site, store data encrypted at rest.
    • Conduct a security review (https://getprotected.asu.edu/services/security-reviews)
    • Does not directly accept credit card information. ASU sites should not directly accept credit card information unless you have the ASU-approved Drupal modules to do so.
      • Any payment processing modules need to be in compliance with PCI 3.0 standards and pass a security review if working with a 3rd party credit card payment processor.

         

    • Address specific issues OWASP identifies as problems, especially the Top 10. (https://www.owasp.org/index.php/Main_Page)
    • Maintain a secure and regularly updated website hosting environment (operating system and applications software) to address known security issues.