We Raised $20M

To Modernize the IPO Tech Stack

Responsible Disclosure Policy

Vinyl Equity is committed to protecting our customer data. No technology is perfect, and Vinyl Equity believes that working with skilled security researchers is crucial in identifying weaknesses in any technology. If you believe you’ve found a security issue in our product or service, we encourage you to notify us. We welcome working with you to resolve the issue promptly.

For any activity you conduct in compliance with this policy, Vinyl Equity will not initiate legal action against you.

General Policy Guidelines

In order to protect our company, our customers and their data, you must accept and comply with the following guidelines:

• Do not disclose the potential security issue to any third party without Vinyl Equity's prior written permission.
• Avoid privacy violations, destruction of data, and interruption or degradation of our service. Only interact with accounts you own or with explicit permission of the account holder.
• Do not engage in any denial of service.
• Do not engage in any spamming of our customers or potential customers.
• Do not engage in social engineering (including phishing) of Vinyl Equity employees or contractors.
• Do not engage in any physical attempts against Vinyl Equity property or data centers.
• Once a report is submitted, Vinyl Equity commits to provide prompt acknowledgement of receipt of all reports (within two business days of submission) and will keep you reasonably informed of the status of any validated vulnerability that you report through this program.
• Submitted reports are received and processed by a third-party provider of Vinyl Equity.
• You give us the right to use the content of your report for any purpose.
• Submission of a report does not create a consumer, employment, or agency relationship between you and Vinyl Equity.
• Vinyl Equity may update this policy from time to time.

By reporting a security bug or vulnerability, you agree to the terms and conditions of this Responsible Disclosure Policy. The information you provide will be handled according to the Vinyl Equity Privacy Policy.

Thank you for helping keep Vinyl Equity and our customers secure.

Submit Vulnerability Report

Program highlights

Open Scope

Accepts reports for all owned assets based on impact, even if not listed in scope. Learn more about Open Scope

Gold Standard Safe Harbor

Adheres to Gold Standard Safe Harbor. Learn more about Gold Standard Safe Harbor

Proof of Concept

The proof of concept is the most important part of your report submission. Clear, reproducible steps will help us validate this issue as quickly as possible.

Title* A clear and concise title includes the type of vulnerability and the impacted asset.

Description* What is the vulnerability? In clear steps, how do you reproduce it?

Impact* What security impact can an attacker achieve?

Submission Details

• Email: Enter your email to receive updates on the status of your submission. If you want to stay anonymous, you may leave this field blank.

Submit Report