Elephant Insurance Responsible Disclosure Policy

Elephant aims to keep its Insurance Services safe for everyone, and data security is of utmost priority. But no matter how much effort we put into system security, there can still be vulnerabilities present. If you believe you’ve found a security issue in our product or service, we appreciate your help in disclosing it to us in a responsible manner. We welcome working with you to resolve the issue promptly.

 

We will validate, respond, and fix vulnerabilities in support of our commitment to security and privacy. We won’t take legal action against, suspend, or terminate access to the Service of those who discover and report security vulnerabilities responsibly.

Provide the details of any suspected vulnerabilities with the Elephant Security Team by filing a report at Security@Elephant.com. Please include in the subject line “Responsible Disclosure Submission”. Please do not publicly disclose these details outside of this process without explicit permission in reporting any suspected vulnerabilities.