Report Security Concerns

How to report

Email: security@titledeep.com

Include: summary of the issue, steps to reproduce, impact assessment, and proof (screenshots/logs) without exposing personal data.

What not to include

• No credential stuffing, phishing, social engineering, or service disruption.
• No bulk extraction or sharing of sensitive customer data (IDs, bank statements, bureau reports).

Response expectations

• Acknowledgement of receipt.
• Triage and prioritisation based on severity.
• Remediation updates where appropriate.

Safe harbour

We treat good-faith security research as authorised when it avoids privacy violations, avoids disruption, and is reported promptly and privately.