§ Overview
At Datablize, we are committed to maintaining the security and privacy of our users and systems. We greatly value the contributions of independent security researchers who help us identify and address vulnerabilities responsibly.
If you are a security researcher and believe you have discovered a security vulnerability in any of Datablize's services, applications, or platforms, we sincerely thank you for reporting it responsibly. We are committed to working with you to understand and resolve the issue quickly and responsibly.
§ Scope
This policy applies to the identification of potential security vulnerabilities found in:
- Datablize's public websites and subdomains (e.g., *.datablize.com)
- Products and services offered by Datablize
- Any publicly accessible systems owned and operated by Datablize Analytics Pvt. Ltd.
§ Good Faith Reporting
Datablize currently does not operate a bug bounty program and does not offer compensation, rewards, or public recognition for vulnerability submissions.
However, we appreciate the community's efforts and are open to meaningful collaboration.
§ Reporting Guidelines
We ask all researchers to adhere to the following principles while conducting testing:
- ✓ Do not attempt to access or modify Datablize data or user/customer data.
- ✓ Do not exploit the vulnerability beyond what is necessary to confirm its existence.
- ✓ Avoid any actions that could negatively affect the availability, performance, or integrity of our systems (including denial of service attacks).
- ✓ If you encounter personal information (e.g., names, emails, identifiers, financial data), stop immediately and notify us.
- ✓ Do not attempt fraudulent transactions or simulate attacks on financial workflows.
- ✓ Conduct all research in a manner that avoids privacy violations, service disruption, or destruction of data.
§ How to Report
Please send your findings to: support@datablize.com
Include the following details to help us investigate efficiently:
- A clear and detailed description of the vulnerability
- Tools, techniques, and steps used to identify the issue
- Supporting materials (e.g., screenshots, logs, PoC)
- Your contact information for follow-up
We will acknowledge your report within 10 business days and may reach out for clarification or additional details.
§ Our Commitment to Security Researchers
If your report complies with this policy and is submitted in good faith:
- ✓ We will not initiate legal action against you.
- ✓ We will treat your submission confidentially.
- ✓ We will work with you to validate and address the issue responsibly.
§ Out-of-Scope Submissions
The following issues are not eligible for responsible disclosure:
- ✕ Social engineering or phishing attempts
- ✕ Resource exhaustion or denial of service (DoS/DDoS)
- ✕ Spam or brute-force attacks
- ✕ Vulnerabilities in third-party systems or services not owned by Datablize
- ✕ Physical attacks on Datablize premises or personnel
- ✕ Use of automated tools or scanners that degrade system performance
- ✕ Posting or uploading malware or malicious payloads
§ Legal Notice
This policy is intended to align with safe harbor principles. However, any activities that violate applicable laws or cause harm to Datablize, its users, or partners may not be protected.
Datablize reserves the right to modify this policy at any time. For questions or clarifications, please contact us at support@datablize.com.