Legal
Legal.
Each page below is a draft pending counsel review. None is in force yet.
Draft
Privacy
- What we collect when you contact us or get rated, and why.
- How client systems, data and findings are kept confidential.
- How long we keep data and how to ask for it to be deleted.
Draft
Terms
- Terms of use for this website.
- Limits of liability for information on this site.
Draft
Rating terms
- Written authorisation to test, scope and conditions.
- What a rating covers, how long it is valid and when re-rating is required.
- Ownership of the score, reports and findings, and how sharing and revocation work.
Draft
Responsible disclosure
- How to report a vulnerability in TRUSCOR systems or SOVA OSS: write to hello@truscor.org.
- SOVA OSS code is also covered by its SECURITY.md on GitHub.
- Our commitment to acknowledge reports and not to pursue good-faith researchers.