Home/Legal & Policy Center/Security & Responsible Disclosure
Information SecuritySafe Harbor Active

Security & Responsible Disclosure

Defense-in-Depth Engineering, Cryptographic Standards, and Ethical Vulnerability Reporting

Entity:Tech Potentia
Location:Mumbai, Maharashtra, India
Effective Date:September 25, 2026
Version & Status:v2026.1 (Active)

1Enterprise Security Architecture & Practices

Tech Potentia embeds defense-in-depth principles across every phase of software development, cloud infrastructure orchestration, and clinical product delivery:

Cryptographic Controls:All network traffic in transit is forced over TLS 1.3 encryption. All underlying cloud databases, persistent disks, and backups are encrypted at rest using AES-256 ciphers.
Identity & Access (RBAC):Staff access to production environments strictly enforces the principle of least privilege, requiring hardware-backed Multi-Factor Authentication (MFA) and biometric credentials.
Secure Development (SDLC):Peer code reviews, automated static application security testing (SAST), software composition analysis (SCA) for dependencies, and secrets scanning on all git repositories.
Telemetry & Incident Monitoring:Continuous telemetry for anomalous traffic patterns, DDoS mitigation via edge CDN providers, centralized security logging, and rapid containment playbooks.

2Vulnerability Disclosure Program & Safe Harbor

We welcome ethical security researchers and white-hat community members to inspect our public endpoints. If you discover a potential vulnerability, please report it to us responsibly under our Safe Harbor terms.

Testing Rules & Restrictions:

  • Never access, exfiltrate, modify, or destroy real user data;
  • Do not execute Denial of Service (DoS/DDoS) attacks against production infrastructure;
  • Do not perform social engineering, phishing, or physical attacks on Tech Potentia personnel;
  • Give us a reasonable window of thirty (30) days to remediate before public disclosure.

Safe Harbor Commitment:

If you conduct vulnerability research in good faith and in full compliance with this policy, Tech Potentia considers your activities authorized, will not pursue civil lawsuits or criminal complaints against you, and will work cooperatively to validate and remediate the issue.

3. How to Submit a Vulnerability Report

Email your detailed technical submission to [email protected]. Please include:

  • Detailed reproduction steps or Proof of Concept (PoC) script;
  • Affected URL, API endpoint, or component;
  • Potential impact assessment and CVSS vector if known.

Our security team acknowledges receipt of vulnerability reports within 24 hours.

4. Official Security Contact

Entity: Tech Potentia

Location: Mumbai, Maharashtra, India

Security & Vulnerability Desk: [email protected]