Vulnerability Disclosure Policy Effective Date: 04/29/2026 We welcome responsible reports of security vulnerabilities.
Scope
In scope:
www.trialsnest.com [App URL] [API URL] Out of scope:
Denial-of-service attacks Social engineering Physical attacks Spam Automated scanning that degrades service Accessing, modifying, deleting, or exfiltrating user data
Reporting
Send reports to security@trialsnest.com with:
Description of the issue Steps to reproduce Impact Screenshots or proof of concept if safe Your contact information
Safe Harbor
We will not pursue legal action against good-faith security research that follows this policy, avoids harm, avoids privacy violations, and gives us reasonable time to fix the issue.