What to include
Send the affected TrustCertia URL, when you observed the issue, a concise description of the impact, and minimal reproduction steps using accounts and data you control. Redact tokens, passwords, private keys and personal information.
TRANSPARENT BY DESIGN
Report a security issue.
Use the TrustCertia contact form and choose Security report. Help us understand the affected surface and the evidence without exposing private information.
Protect other people’s data
If you encounter another person’s information, stop accessing it and describe the exposure without copying or sharing their records. Request a suitable private exchange through the contact form before sending restricted material.
Scope and permission
This reporting channel covers TrustCertia’s application and published integrations. A website displaying our badge remains operated by its own owner. Reporting an issue does not grant permission to access accounts, test other customers, disrupt availability or bypass controls.
Coordinating a report
Provide a way to continue the conversation through the contact form. Explain any immediate exposure and allow the team to investigate and coordinate remediation. Submitting a report does not create a payment or bounty commitment.
Contact and machine-readable file
Use https://trustcertia.com/contact for a human response. The reporting URL and expiry are also published at https://trustcertia.com/.well-known/security.txt. A listed contact or policy is not evidence that the service is free of vulnerabilities.