Vulnerability Disclosure Policy

Security at ChargeDot

At ChargeDot, we take the security of our systems and our customers’ data seriously. We appreciate the efforts of the security community and encourage responsible disclosure of any vulnerabilities found in our products or services.

How to Report a Vulnerability

If you believe you have discovered a security vulnerability in any of our systems, please report it to our security team as soon as possible at security@eu.chargedot.com.

Please include a detailed description of the vulnerability, the systems or services affected, and steps to reproduce the issue.

Safe Harbour

ChargeDot will not pursue legal action against individuals who report vulnerabilities in good faith and comply with this policy. We ask that you:

• Avoid accessing, modifying or deleting any user data.
• Do not disrupt or degrade our services.
• Give us a reasonable amount of time to investigate and remediate the issue before any public disclosure.

Recognition

We may offer public acknowledgment or rewards for valid vulnerability reports, at our discretion. If you would like to be recognised, please let us know in your report.

Scope

This policy applies to all digital assets owned and operated by ChargeDot, unless otherwise specified.

Response Commitment

We aim to acknowledge receipt of your report within 3 business days and will keep you informed of our progress throughout the remediation process.

Thank you for helping us keep ChargeDot and our customers safe.