Introduction

At Mindlance, security and privacy are our top priorities. We appreciate and encourage responsible security research to identify vulnerabilities that could impact our systems, users, or data. This policy outlines how researchers can report vulnerabilities and how Mindlance commits to addressing them in a transparent and ethical manner.

Scope of the Policy

The following assets fall under this policy:

Reporting Guidelines

Security researchers are expected to follow these steps when reporting vulnerabilities:

1. Detailed Submission: Provide a clear explanation, including steps to replicate the issue.
2. Ethical Conduct: Avoid exploiting the vulnerability for unauthorized access or data extraction.
3. Confidentiality: Do not publicly disclose the vulnerability before Mindlance has resolved it.

Preferred Disclosure Channels

Vulnerabilities should be reported via the official email id : ciso@mindlance.com

Mindlance’s Commitment to Security Researchers

Legal Protections

Mindlance assures security researchers that:

• No legal action will be taken against those who follow this policy in good faith.
• The researcher may be publicly acknowledged if they opt-in for recognition.

Public Disclosure Process

Once a reported vulnerability is resolved, Mindlance may work with the researcher to disclose details of the issue and fix. This will be done responsibly to prevent exploitation.

Policy Amendments

Mindlance reserves the right to update this policy. The latest version will be available on our official website.