- Published fact
- In progress
Security Contact: Published
Self-assessed by IdeaScore. Not certified by an outside body.
A public way for anyone to report a security problem to us.
In place
- The Security page sets out how to report a vulnerability, what is in scope, our safe harbour and our response times.
- We acknowledge each report within 3 business days.
- The app publishes a security.txt file (RFC 9116) with our security contact and an expiry date we renew every year.
Work in progress
- The same security.txt file on the website.
Evidence
- Vulnerability reporting policyPublished
- security.txtPublished
Limits
- We do not run a paid bug bounty.
Bring Your Questions to a Product Specialist
A 30-minute walkthrough of the Trust Centre, the Data and Privacy card and the Decision Trail, with your committee's questions.