Responsible Disclosure

Our Commitment to Security

We take the security of our systems and our clients' data seriously. If you've found a security vulnerability, we want to hear about it, and we'll work with you to understand and address it promptly.

Scope

This policy covers:

• This website, s-and-s-associates.in
• The Compliance Dashboard (s-and-s-associates.in/dashboard.html)
• S&S Billing Suite, our desktop software

How to Report

Email info@s-and-s-associates.in with a description of the issue, the steps to reproduce it, and its potential impact. Please include enough detail for us to understand and verify the issue quickly.

What We Ask of You

• Give us a reasonable amount of time to investigate and address an issue before disclosing it publicly
• Make a good-faith effort to avoid privacy violations, data destruction, or service disruption while investigating
• Do not access, modify, or exfiltrate data beyond what's necessary to demonstrate the vulnerability
• Do not use automated scanning tools that could degrade service for others

Our Commitment to You

If you report a vulnerability in good faith and in accordance with this policy, we will not pursue legal action against you for that research. We aim to acknowledge reports within 5 business days, and we'll keep you reasonably informed of our progress toward a fix.

Contact

S & S Associates
Ashok Nagar, Medahalli, Bengaluru, Karnataka, India
Email: info@s-and-s-associates.in