Responsible Disclosure Policy 

 Last updated November 19th 2025

1.Overview

We take the security and privacy of our users and their data seriously. Our mission is to deliver innovative healthcare solutions built on trust, transparency, and protection of sensitive information.

If you believe you’ve found a security vulnerability or weakness in our systems, we want to hear from you. This page outlines how to report it responsibly and what you can expect from us in return.

2. Reporting a Vulnerability

If you discover a potential security issue, please email our security team at security@gobloominghealth.com or submit it through our Bug Bounty Submission Form.

Please include:

• A clear description of the issue and where it was found

• Steps to reproduce the vulnerability

• Any supporting details (screenshots, logs, or proof-of-concept code, if applicable)

Do not include any personal health information (PHI), patient records, or other sensitive data in your report.

3. Guidelines for Responsible Disclosure

To protect our users and systems, please follow these principles:

1. Do not exploit or misuse the vulnerability — e.g., accessing, modifying, or deleting data.

2. Avoid privacy violations — never access or share PHI or other sensitive information.

3. Give us reasonable time to fix the issue before publicly disclosing it.

4. Operate in good faith — act to improve security, not to harm users or services.

   
   

   
   

4. Bug Bounty Program

We appreciate responsible research and reward valid, impactful findings through our Bug Bounty Program.

Rewards are based on severity, scope, and quality of the report, typically following CVSS (Common Vulnerability Scoring System) guidelines.