Security Policy

1. How to report

Anyone who suspects a security incident reports it immediately to security@traceable.digital.

Reports of vulnerabilities from customers and security researchers are received at the same address, security@traceable.digital.

Please describe the issue, where you found it, and the steps needed to reproduce it.

2. What happens to your report

• Each report is acknowledged, assessed and tracked to resolution.
• Each vulnerability is ranked using an industry-standard severity score, adjusted for how easily it could be used and how exposed the affected system is.

3. Scope

This policy covers the Traceable platform at app.traceable.digital and its software dependencies, and the infrastructure Traceable operates, including this website.

4. Machine-readable contact

The same contact is published in our security.txt file, in the format set out in RFC 9116.