Security disclosure policy

Digital Qazaqstan Ltd welcomes the reporting of suspected security issues relating to this website or to the architecture it describes. Reports should be sent to the address below.

Where the report concerns a sensitive matter, encrypted communication is preferred; a public key for the security disclosure address is available on request.

The Company will acknowledge legitimate reports within five working days and will undertake to investigate substantive findings. The Company does not currently operate a paid bug-bounty programme. Coordinated disclosure is requested: please refrain from public disclosure of any finding until the Company has had a reasonable opportunity to investigate and, where applicable, remediate.

Reports should not include information concerning the operator's deployments, counterparties or operating jurisdictions unless that information is strictly necessary to demonstrate the finding. The Company will treat any such information as restricted.

Architecture Brief access enquiries, procurement enquiries and general institutional engagement should be addressed to deep@digitalqazaqstan.com, not to the security disclosure channel.

Governing law: England and Wales.