Reporting a security issue

How to report

Email [email protected] with "Security report" in the subject. Please include:

• the affected URL, endpoint or tool;
• the steps to reproduce the issue, and what you expected to happen;
• the impact you think it has;
• how we can contact you for follow-up questions.

We reply to confirm we have received your report, and we keep you updated while we investigate and fix it. The same contact is published in /.well-known/security.txt.

Scope

• the website at formatix.ai;
• the Formatix platform at platform.formatix.ai, including the REST API;
• the Formatix MCP connectors, including https://platform.formatix.ai/mcp/claude;
• email-in formatting at [email protected].

What we ask

• Use only accounts you created, and do not access, change or delete other people's data. If you reach personal data by accident, stop and tell us.
• Do not run denial-of-service tests, spam, social engineering or physical attacks.
• Give us reasonable time to fix the issue before you disclose it publicly.

We do not run a paid bug bounty programme.

Data protection questions

Questions about personal data, or requests to exercise your rights, are covered by our privacy policy. Formatix AI Ltd is registered with the UK Information Commissioner's Office under registration number ZC184545.