Legal & trust

Responsible Disclosure

We value coordinated disclosure and appreciate reports of potential security issues.

Approved and in effect

Document status

Version: v1.0
Effective date: 2026-09-01
Last updated: 2026-10-10
Content owner: Content/Legal Coordinator

This responsible disclosure policy defines the coordinated disclosure process and reporting guidelines for Vision Scan. The customer agreement executed with Vision Scan is authoritative.

How to report

Report suspected vulnerabilities to our security team with a clear description, steps to reproduce, and impact. Avoid testing on data you are not authorized to access.

How we handle reports

We acknowledge reports, triage impact, and work to remediate confirmed issues. We aim to keep reporters informed without disclosing unauthorized details.

Scope

This program covers the Vision Scan application, SDK and hosted services. It does not authorize access to customer data or other tenants.

Recognition

Where a formal recognition program exists, details are published after approval. This summary does not constitute an offer of compensation.

Disclaimers

The executed customer agreement is the binding document; this summary is informational.

This is not legal advice. Final terms require counsel approval before publication.

Not final

v0.1-draft — not the published agreement

Pending approval

limitation-of-liability and indemnity language require counsel