Responsible Disclosure Policy

At IOLAN, the security of our systems and the protection of our customers' data are of utmost importance. We therefore strive for a high level of security. Despite our efforts to secure our systems, a vulnerability may still exist. If you discover a weakness, we kindly request that you report it to us so we can resolve it as quickly as possible.

How to Proceed

• Submit your findings via the contact form or email us at iolan@iolan.com. You can also use our secure Cryptshare server at https://cryptshare.iolan.com/a> for this purpose;
• Provide sufficient information to reproduce the issue so it can be resolved as quickly as possible. Usually, the IP address or URL of the affected system and a description of the vulnerability are enough, but more detailed explanations may be needed for complex vulnerabilities;
• Leave at least an email address or phone number so we can contact you with any questions. We prefer communication via email;
• Do not exploit the vulnerability or problem you discovered. For example, don't download more data than necessary to demonstrate the vulnerability, or delete or modify data belonging to others;
• Do not disclose the problem to others before it has been resolved;
• Do not perform attacks on physical security, use social engineering, distributed denial of service, spam, or third-party applications.

Next Steps

• We will initiate actions in collaboration with our IT department;
• Within 5 business days of your report, you will receive our evaluation of the report and an estimated resolution date;
• If you have followed the instructions above, we will not take legal action against you regarding the report;
• We will treat your report with strict confidentiality and will not share your personal information with third parties without your consent;
• We will keep you informed of the progress in resolving the issue.

We aim to process and resolve all reports as quickly as possible. We trust that discovered vulnerabilities will not be misused.