Security Policy for uigraph.app

Effective Date: September 18, 2026

UIGraph ("we", "us", or "our") takes the security of our platform and our customers' data seriously. This page describes how to report a suspected security vulnerability and what you can expect from us in response.

1. Reporting a Vulnerability

If you believe you have found a security vulnerability in UIGraph's website, product, or infrastructure, please report it to us at support@uigraph.app with a subject line starting with "Security". Please include as much detail as possible so we can reproduce and triage the issue quickly: affected URL or component, steps to reproduce, and the potential impact.

2. Scope

This policy applies to systems we operate and control, including:

  • uigraph.app and its subdomains
  • The UIGraph product and its APIs
  • UIGraph's official integrations (e.g. the Slack app)

Third-party services we rely on (see our Sub-processors page) are out of scope for this policy; please report issues in those services directly to their owners.

3. Responsible Disclosure Guidelines

When researching in good faith, please:

  • Give us a reasonable amount of time to investigate and remediate an issue before disclosing it publicly.
  • Avoid accessing, modifying, or deleting data that does not belong to you.
  • Avoid actions that could degrade the availability of our services, such as denial-of-service testing.
  • Only interact with accounts and data you own, or use test accounts where possible.

We will not pursue legal action against researchers who make a good-faith effort to comply with these guidelines while investigating and reporting a vulnerability to us.

4. Our Commitment

  • We will acknowledge receipt of your report.
  • We will investigate and work to validate the reported issue.
  • We will keep you informed of our progress as we work toward a resolution.
  • We do not currently operate a paid bug bounty program, but we are happy to publicly credit researchers who report valid issues, with their permission.

5. Contact Us

For anything else related to this policy, reach us at: support@uigraph.app