Responsible disclosure.

Email our security team with a clear description of the suspected issue, the affected system, steps to reproduce it, and any supporting evidence.

We take security breaches extremely seriously and will work to remedy them as quickly as possible.

Please avoid accessing, modifying, retaining, or sharing data that does not belong to you. Do not disrupt services or use social engineering, physical intrusion, denial-of-service, or destructive testing.

We will acknowledge credible reports, investigate them, and keep the reporter informed where practical. Timelines depend on severity, complexity, and any coordination required with affected customers or suppliers.