Hi Patrick,

I don't see a record specifically referring to Laserfiche testing its software development practices against the NIST Special Publication 800-64 guidelines. 

However, the security of customer data is of paramount importance to Laserfiche. Laserfiche maintains industry standard software engineering practices throughout the development lifecycle to minimize vulnerabilities and security risks during code creation. These rigorous practices include the following measures:

• Laserfiche uses code-scan software in-house to validate code.
• Laserfiche contracts with a leading security company to perform code reviews and web penetration security assessments.
• Laserfiche works with a third party security company to perform live server testing intended to prevent security flaws, such as input validation, input sanitizing and buffer overruns, which are major types of vulnerabilities in the OWASP Top Ten.