Overview

At Aicody, we take the security of our systems and data seriously. We appreciate the security research community's efforts to help us maintain the highest standards of security. This policy outlines our responsible disclosure process for security vulnerabilities.

Scope

In Scope

• aicody.com and all subdomains
• All Aicody web applications and services
• AI systems and APIs (AICOPTER, AISEC, AITRACK, AIGENT, AIMON, AILOG)
• Manufacturing systems (AISCAN, AIRSTANCE, AITRONICS, AICAD, AIFAN)
• Healthcare applications (AIMBRACE, AIHAT, AISHIRT, AIHAND)
• Financial services (AISECT, AIVEST, AIVEND)

Out of Scope

• Third-party services and partner networks
• Physical security issues
• Social engineering attacks
• Denial of Service (DoS) attacks
• Issues requiring physical access to our facilities

Reporting a Vulnerability

If you discover a security vulnerability, please report it to us at:

Email: team@aicody.com

Subject Line: [SECURITY] Vulnerability Report

Please include the following information in your report:

• Description of the vulnerability
• Steps to reproduce the issue
• Potential impact and risk assessment
• Any proof-of-concept code or screenshots
• Your contact information

Response Timeline

• Initial Response: Within 48 hours
• Status Update: Within 7 days
• Resolution Target: Critical issues within 30 days, other issues within 90 days

Responsible Disclosure Guidelines

We ask that security researchers:

• Make good faith efforts to avoid privacy violations and disruptions to our services
• Provide reasonable time for us to resolve issues before any disclosure
• Do not access or modify data belonging to others
• Do not perform actions that could harm our users or systems
• Do not publicly disclose the vulnerability until we have resolved it

Legal Safe Harbor

We will not pursue legal action against researchers who:

• Follow this responsible disclosure policy
• Act in good faith
• Do not violate any laws
• Do not access or modify data without permission

Recognition

We appreciate the efforts of security researchers and will:

• Acknowledge your contribution in our Hall of Fame (https://aicody.com/hall-of-fame)
• Work with you on appropriate disclosure timelines
• Provide regular updates on the status of your report

Contact Information

For security-related inquiries, please contact us at:

• Email: team@aicody.com
• Address: 5 Thomas Mellon Circle, Suite 154, San Francisco CA 94134
• Phone: +1 (415) 952-7773