Responsible Disclosure and Security Contact

If you believe you have found a security vulnerability in Accept Mission, we want to hear from you. Responsible disclosure helps us protect customers and keep the platform secure.

Report a vulnerability #

Send vulnerability reports to: [email protected]

What to include #

To help us validate and resolve the issue quickly, include:

• A clear description of the vulnerability and the affected area (website, API, or platform feature)
• Steps to reproduce (proof of concept is helpful)
• The impact you expect (what could happen if exploited)
• Any supporting material (screenshots, logs, request samples)
• Your contact details and preferred way to communicate
• Whether you need credit for the report (optional)

Please do #

• Give us reasonable time to investigate and fix the issue before public disclosure.
• Keep details confidential until we confirm a fix or agree a disclosure timeline.
• Report only what you need to demonstrate the issue.

Please do not #

• Access, modify, or delete other people’s data.
• Disrupt the Services (for example denial-of-service testing).
• Use social engineering or phishing against our customers or employees.
• Exfiltrate data beyond what is strictly required to confirm the vulnerability.

How we handle reports #

When we receive your report, we:

• Confirm receipt and start triage
• Assess severity and potential impact
• Work on remediation and validation
• Communicate updates when meaningful progress is made

If a report is valid, we will coordinate disclosure timing with you when appropriate.

Security and procurement contact for customers #

If you are a customer, buyer, or procurement reviewer and you have questions about security, compliance, data location, or subprocessors, contact: [email protected]

To speed up your request, include:

• Your company name
• Your preferred timeline
• Any required documents or questionnaires (for example ISO scope request, security review checklist)