Responsible Disclosure
We consider the security of our systems a top priority, but no matter how mutch effort we put into system security, vulnerablilities can still be present.
If you discover a vulnerability, we would like to know so that we can take measures to fix it as quickly as possible. We want to ask you to help us better protect our customers and our systems.
Please do the following:
- Email your findings to responsibilitydisclosure@office-dtc.com
- Do not exploit the vulnerability or problem you have discovered, for example by downloading more data than is neccesary to demonstrate the vulnerability or by deleting or modifying to others
- Don’t tell others about the problem until it’s resolved
- Do not attack physical security, social engineering, distributed denial of service, spam or third party applications
- Please provide enough information to reproduce the problem so that we can resolve it as quickly as possible. Usualy, the IP address or URL of the affected system and a description of the vulnerability are sufficient, but complex vulnerabilities may require further explanation.
What we promise:
- We will respond to your report within 3 business days with our evaluation of the report and an expected resolution date
- If you have followed the instructions above, we will not take any legal action against you in relation to the report
- We treat your report as strictly confidential and do not pass on your personal data to third parties without your consent
- We will keep you updated on the progress of resolving the issue, we list your name as the discoverer of the issue (unless you request otherwise)
- As a token of thanks for your help, we offer a reward for every report of security issue that we were not aware of. The amount of the reward is determined on the basis of the seriousness of the leak and the quality of the report. The minimum reward is a € 50,00 gift card.
We strive to resolve all issues as quickly as possible and would like to play an active role in the eventual publication of the issue after it is resolved.
Professional advice
You would like to continue with your business. You want to take steps now, not in a year’s time. We understand that and are here for you.
Get in touch with our team and discuss the possibilities!
Meet the team
Frequently asked questions
The duration of an optimization process can vary depending of various factors, including the complexity of the processes within your organization, the availability of data and resources, and the scale of the desired changes. Generally, we aim to conduct the optimization process as efficiently as possible, with a focus on careful analysis and implementation. We can establish a specific timeline for the optimization process after a thorough evaluation of the situation and the objectives of your company.