Responsible Disclosure

Musifacts Europe BV welcomes responsible reports of security vulnerabilities affecting MusiSign. This policy explains how to report security issues safely and responsibly.

1. How to report

Send vulnerability reports to info@musisign.com. Include a clear description of the issue, steps to reproduce, affected URLs or components, potential impact and any relevant screenshots or logs.

2. Safe research rules

When testing or reporting a vulnerability, do not:

• access, modify, delete or exfiltrate data that does not belong to you;
• interrupt or degrade the availability of the service;
• perform social engineering, phishing or physical attacks;
• use automated high-volume scanning without written permission;
• publicly disclose the issue before Musifacts Europe BV has had time to investigate.

3. Our response

Musifacts Europe BV will review reports in good faith and may contact the reporter for further information. Remediation timing depends on severity, complexity and operational impact.

4. No unauthorised access

This policy does not grant permission to violate applicable law, access unauthorised data, disrupt services or breach confidentiality obligations.