Security.

Security is treated as an ongoing process. This page describes responsible use of the public website and how to report a suspected vulnerability without making claims about systems or controls that cannot be verified from the public site.

Website protection

Comversum uses security measures appropriate to the website’s functions, including access controls, protected administration, encrypted web traffic, form protections and operational monitoring. Controls are reviewed and may change as the platform evolves.

Responsible disclosure

If you believe you have found a vulnerability, send a concise, non-sensitive description to info@comversum.com. Include the affected page or function, the observed behaviour and steps that allow the issue to be reproduced safely.

Please do not

• access, modify or delete data that does not belong to you;
• attempt to obtain passwords, tokens or confidential information;
• use denial-of-service techniques or automated activity that disrupts the website;
• publish sensitive exploit details before there has been a reasonable opportunity to review and address the issue.

Security of enquiries

Public forms are intended for ordinary enquiries. Do not send credentials, authentication codes, confidential case files, personal identification documents or other sensitive material through the website unless a secure channel has been specifically agreed.

Third-party services

Some optional website functions can rely on external services. Their security and privacy practices are governed by the relevant provider as well as the configuration used on this website.