HYPHAE
Book a demo
Legal
Security Policy
Last updated: 9 November 2026
Protecting the women and care teams who rely on HYPHAE is part of the product. This policy explains how to report a security vulnerability to us. For an overview of how we protect data, see our Security page.
1. How to report a vulnerability
Write to [security email] with a description of the issue, the steps to reproduce it, its possible impact and how we can reach you. Please never include real patient data in your report.
2. What we ask of you
Act in good faith. Do not access, change or delete data beyond what is needed to show the issue, and stop as soon as you reach personal data. No denial-of-service, social engineering or physical attacks. Give us reasonable time to fix the issue before sharing it publicly.
3. What we commit to
We will acknowledge your report within [5] working days, keep you informed, fix confirmed issues according to their risk and, if you wish, credit you once the issue is resolved. We will not take legal action against research carried out in good faith under this policy.
4. Scope
In scope: this website and, once available, the HYPHAE platform and apps. Out of scope: services run by third parties, such as our hosting providers, which should be reported to them directly.
5. How we protect data
Health data is hosted with a certified health data host (HDS) in the European Economic Area, encrypted in transit and at rest, accessible by role only and recorded in a full audit trail. Read more on our Security page.