Introduction

Security is core to Narrative BI values, and we value the input of external security researchers acting in good faith to help us maintain a high standard for the security privacy of our users and systems. This policy sets out our definition of good faith in the context of finding and reporting security vulnerabilities, as well as what you can expect from us in return for your effort, skill, and dedication.

Guidelines

We require that all security researchers to:

If you follow these guidelines when reporting an issue to us, we commit to:

Expectations

When working with us according to this policy, you can expect us to:

In-Scope Vulnerabilities