Security Policy

This is the security policy of Auftrag.app.

Using Auftrag.app

  1. Use a secure, long password. Use a password manager to make it easier for you.
  2. Enable two-factor authentication if possible. We offer software 2FA (compatible with Authy, Google Authenticator, etc.) and hardware 2FA (compatible with Apple Touch ID, Windows Hello, FIDO U2F key, etc.).
  3. Do not do anything illegal on the platform, and do not call for illegal activities.
  4. No doxxing.
  5. No spam.
  6. No distribution of malware.
  7. Do not do anything that could limit the availability of the platform (brute force attacks, load testing, DDoS, etc.)
  8. No scraping or data mining.
  9. Embedding of the platform is not permitted outside of the API Terms of Use. Contact us at [ Javascript not enabled ] to get information about the availability and use of the API.

Disclosure Policy

No technology is perfect, and UNOVY believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. If you believe you've found a security issue in our product or service, we encourage you to notify us. We welcome working with you to resolve the issue promptly.

  1. Let us know as soon as possible upon discovery of a potential security issue, and we'll make every effort to quickly resolve the issue.
  2. Provide us a reasonable amount of time to resolve the issue before any disclosure to the public or a third-party.
  3. Make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our service. Only interact with accounts you own or with explicit permission of the account holder.

Auftrag.app has a security.txt according to draft-foudil-securitytxt-09.

Exclusions

While researching, we'd like to ask you to refrain from:

  1. Denial of Service
  2. Spam
  3. Any physical attempts against UNOVY property or data centers

Safe Harbour

Any activities conducted in a manner consistent with this policy will be considered authorized conduct and we will not initiate legal action against you. If legal action is initiated by a third party against you in connection with activities conducted under this policy, we will take steps to make it known that your actions were conducted in compliance with this policy.