Reporting Security Issues

If you have discovered a vulnerability in a cPaperless product, please email us at: [email protected]. Please include a detailed summary of the issue including the name of the product (e.g., SafeSend) and the nature of the issue you believe you've discovered. cPaperless will respond to your notification within a reasonable amount of time and will quickly work to fix the reported vulnerability.

Responsible Disclosure

cPaperless is committed to working with security researchers through the process of responsible disclosure, which is the practice of notifying a software vendor before publicly releasing information about a vulnerability. Responsible disclosure is important to the safety of our customers as it allows cPaperless to resolve security issues before they are made available to the hacking community. We strongly encourage anyone who is interested in researching and reporting vulnerabilities in our products to participate in the practice of responsible disclosure. We will make every effort to communicate with you while the vulnerability is being fixed and to acknowledge your report once the security issue has been resolved.