Reporting a Security Issue

If you believe you have found a security vulnerability in Liaison (useliaison.com, app.useliaison.com or the Liaison mobile apps), or in the JIFU AI service that Liaison operates (ai.jifu.com), please email support@useliaison.com with the subject line "Security report".

What to include

A description of the issue, the steps to reproduce it, the affected URL or app version, and how to contact you. Please do not include other people's personal data in your report beyond what you need to show the issue.

What we ask

• Give us a reasonable time to fix the issue before you disclose it publicly.
• Do not access, change or delete other people's data beyond what you need to show the issue.
• Do not run denial-of-service, social-engineering or physical tests.
• Stop and tell us as soon as you reach personal data that is not yours.

What we will do

We will confirm that we received your report, keep you informed while we work on it, and tell you when it is fixed.

Safe harbor

If you make a good-faith effort to follow this policy, we will not bring or support legal action against you for your research, and we consider it authorized under laws such as the Computer Fraud and Abuse Act to the extent we can authorize it. This covers only Liaison's own systems; it does not authorize access to any customer's data or any third party's systems. It does not cover systems that other companies run for themselves, including JIFU's own websites and its sign-in service.

We do not currently run a paid bug bounty.

How we handle personal information is described in our Privacy Policy. Our machine-readable contact file is at /.well-known/security.txt.