Security

Digital by Default • Responsible Disclosure

We take the security of our systems and customer data seriously. If you discover a vulnerability, we appreciate your help in reporting it responsibly.

What to include

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggested remediation

Response commitment

We aim to acknowledge reports within 48 hours and provide a substantive response within 7 days.

Safe harbour

We will not pursue legal action against researchers who:

• Make a good-faith effort to avoid privacy violations, data destruction, or service degradation
• Do not access or modify data beyond what is necessary to demonstrate the vulnerability
• Report the issue to us before disclosing it publicly

Thank you for helping keep Digital by Default and our clients secure.

← Back to homepage