Legal

Report a security concern

Define which participant data the campaign collects, who can access it and how long records are retained. Document these decisions in campaign notices and your deployment agreement.

POLICY DETAILS

Plan participant data access and retention.

01

Control access

Protect the single administrator account and define responsibility for hosting and maintenance.

02

Protect operator accounts

Plan two-factor enrollment, recovery and account removal.

03

Review activity

Use activity history and draw records during operational review.

Share a safe reference to the issue.

Identify the affected environment, observed behavior and reproduction steps. Do not include participant records, passwords or access tokens in a general inquiry. Ask the responsible contact for an appropriate channel for sensitive evidence.

Contact the team