Security Policy

Introduction

We at SecuDoc are committed to maintaining the security of our systems and our users' data. We welcome the contribution of external security researchers and believe in responsible disclosure of security vulnerabilities. To ensure the effectiveness of our security measures and to facilitate responsible security testing, we have outlined this security policy.

Scope

This policy applies to the following domains and services:

• secudoc.nl
• www.secudoc.nl
• secudoc.app
• mail.secudoc.app

Any testing outside these domains is not authorized under this policy.

Testing Guidelines

To promote responsible testing and to protect our users and services, we ask that you:

• Avoid violating the privacy of others, disrupting our services, destroying data, or interrupting or degrading our services.
• Do not perform any Distributed Denial of Service (DDoS) attacks, spamming, social engineering attacks, or physical attacks against our properties, data centers or employees.
• Conduct testing in a manner that avoids undue load on our systems and services. Automated scanning tools must be configured to operate at a low intensity.
• Keep the information about any vulnerabilities you've discovered confidential between yourself and SecuDoc until we've had an adequate time to address the issue.

Reporting a Vulnerability

We ask that any vulnerabilities found are reported to us via email to security@secudoc.nl. Please include detailed information about the issue you've discovered and how it can be exploited to help us understand the nature and scope of the problem.

Legal Considerations

While we support and encourage security research, any activity that would be considered illegal or unethical by law or industry standards is explicitly out of bounds and not tolerated. We will consider action, including reporting to law enforcement, against individuals who conduct non-compliant testing or disclose vulnerabilities in a manner not in line with this policy.

Acknowledgement

We appreciate the effort and expertise of security researchers who help keep our systems and users safe by reporting vulnerabilities in accordance with this policy. We are committed to transparent communication and will acknowledge the contribution of security researchers in our public disclosures of security issues, where appropriate.

Thank you for helping to keep SecuDoc and its users safe.