Security Response

Last updated: November 25, 2021

We appreciate your concern

Keeping customer data safe and secure is a huge responsibility and a top priority. We work hard to protect our customers from the latest threats. Your input and feedback on our security are always appreciated.

Reporting security problems

For report security vulnerabilities or sensitive reports, please email us at [email protected].

Tracking and disclosing security issues

Have you discovered a web security flaw that might impact our products? Please let us know [email protected]. If you submit a report, here’s what will happen:

  • We'll acknowledge your report.
  • We'll triage your report and determine whether it's eligible for a bounty.
  • We'll investigate the issue and determine how it impacts our products. We won't disclose issues until they've been fully investigated and patched, but we’ll work with you to ensure we fully understand the severity and impact.
  • Once the issue is resolved, we'll post a security update along with thanks and, if you want, credit for the discovery.
19 Signals policies are open source, licensed under CC BY 4.0. Adapted from the Basecamp open-source policies / CC BY 4.0.