Vulnerability Disclosure Policy
We welcome reports from security researchers. If you believe you have found a vulnerability in GradeLogic™, please tell us so we can fix it.
How to report
Email security@gradelogic.ai with a description of the issue, the steps to reproduce it, and any relevant proof-of-concept. Please do not include real student data in your report.
What to expect
- We aim to acknowledge your report within 5 business days.
- We will keep you informed as we investigate and remediate.
- We will credit you, with your permission, once an issue is resolved.
Safe harbor
We will not pursue or support legal action against researchers who act in good faith, avoid privacy violations and service disruption, and give us a reasonable chance to remediate before public disclosure.
Guidelines
- Only test against your own account and data.
- Do not access, modify, or delete other users' data.
- Do not run denial-of-service, spam, or social-engineering attacks.
- Stop and report immediately if you encounter any student or personal data.
Rewards
We do not currently operate a paid bug-bounty program, but we are grateful for responsible disclosures and will acknowledge them.