Skip to content
Indavera
Draft. This page is starting content, pending review before publishing.
Security

Report a security issue

Indavera welcomes responsible reports that help us protect the platform and our customers. If you believe you have identified a security vulnerability affecting Indavera, please report it privately rather than disclosing it publicly, and give us a reasonable opportunity to investigate and remediate it before any public disclosure.

support@indavera.com

Security reports

Please include, where possible

  • a clear description of the issue;
  • the affected URL, endpoint, feature, or component;
  • steps required to reproduce the issue;
  • the potential security impact;
  • screenshots or proof-of-concept material that does not unnecessarily expose customer data; and
  • a safe way for us to contact you.

Please do not

  • access, alter, download, or retain customer data beyond what is strictly necessary to demonstrate the issue;
  • perform denial-of-service, destructive, disruptive, or social-engineering testing;
  • use automated testing that materially degrades the service;
  • attempt to obtain credentials from Indavera personnel or customers; or
  • publicly disclose an unresolved vulnerability before Indavera has had a reasonable opportunity to investigate and remediate it.

We will acknowledge legitimate reports, investigate them in good faith, and coordinate communications where appropriate. This page does not create a bug-bounty entitlement unless Indavera has separately published a bounty program.

Indavera describes only security certifications and attestations it actually holds. See Security & Subprocessors for our current security approach and subprocessor list.