Introduction

GROUPE ATLANTIC places a high priority on the cybersecurity of its products and services, starting from the design phase.

However, if you discover a vulnerability while using our products or services, please report it to our team using the form below; we are committed to resolving it promptly. Once we receive your report, our teams will contact you to compile a detailed report on the vulnerability you encountered and any relevant background information. This vulnerability disclosure policy is intended to provide clear guidelines for the responsible disclosure of vulnerabilities identified within our systems.

Principles of Responsible Disclosure

We encourage security researchers and community members to responsibly report vulnerabilities to us and to follow these guidelines:

• Confidentiality: Do not publicly disclose details of vulnerabilities until a solution is available. Please do not include any personal information in your reports, other than the information needed to contact you.
• Cooperation: Work with our security team to provide us with all the information needed to reproduce and resolve the vulnerability, without any compensation.
• Responsibility: Avoid any actions that could result in a service interruption, data loss, or a breach of user privacy.

Reporting Process

If you identify a security vulnerability, please follow these steps to report it to us:

Step 1: Submit your report using the form

Include the following information in your report:

• A detailed description of the vulnerability.
• The steps required to reproduce the problem.
• Any relevant portions of code.
• Your contact information for follow-up.

This form is intended SOLELY for reporting security vulnerabilities in products or services. This is not technical support information regarding our products or services. Any content other than that specifically related to security vulnerabilities in our products or services will not be addressed.

Step 2: Acknowledgment of Receipt

You will receive a confirmation of receipt within 24 hours of submitting your report. Our security team will review the report and contact you for any additional information, if necessary.

Step 3: Evaluation and Correction

Our security team will assess the vulnerability and work to develop a solution. We will make every effort to address all reported vulnerabilities as quickly as possible.

Company Commitment

GROUPE ATLANTIC is committed to:

• Treat all vulnerability disclosures confidentially and professionally.
• Do not take legal action against those who report vulnerabilities in good faith.
• Work with the security community to continuously improve the security of our systems and protect our users’ data.

All aspects of this process are subject to change without notice, as well as to exceptions on a case-by-case basis. No specific response level is guaranteed for any particular question or category of questions.