Nanoheal is included in the 2026 Gartner® Magic Quadrant™ for Digital Employee Experience Management Tools.In the 2026 Gartner® Magic Quadrant™ for DEX tools. See it on Gartner ↗

NanohealNanoheal

Popular

↑↓ to moveEnter to open/ to search from any page

 Schedule a demo
Legal

Responsible disclosure policy.

If you believe you have found a security vulnerability in our website or a Nanoheal product, tell us so we can fix it together.

Last updated 18 October 2026

At Nanoheal, security is our utmost priority. We're committed to ensuring the safety and integrity of our products and services. If you believe you've discovered a security vulnerability in our website or a Nanoheal product, we encourage you to responsibly disclose it to us so we can work together to address the issue.

How to report a security issue

If you've identified a potential vulnerability, email us at security@nanoheal.com. Nanoheal customers can also raise it through their customer success contact.

Please include the following information in your report:

  • The affected component (e.g., Nanoheal platform, nanoheal.com website).
  • The type of vulnerability identified (e.g., cross-site scripting, SQL injection).
  • A non-destructive proof-of-concept or clear instructions on how to reproduce the vulnerability.

Responsible disclosure guidelines

  • Do not exploit the vulnerability: Only use the vulnerability to the extent necessary to demonstrate its existence to us.
  • Do not disrupt services: Refrain from any actions that could disrupt our services or intentionally modify any production systems.
  • Maintain confidentiality: Do not disclose information about the vulnerability to any third party without our explicit written consent. This includes any data you might have accessed while demonstrating the vulnerability.
  • Securely delete data: Any data acquired during your vulnerability testing should be securely deleted as soon as it's no longer needed for your report.

Our commitment to you

  • Acknowledgement: We will make our best effort to acknowledge your report within 72 hours of receipt.
  • Communication: We will keep you informed about the progress of our investigation into the reported vulnerability.
  • No legal action: We will not pursue legal action against you for responsibly reporting and demonstrating the vulnerability, provided you adhere to these guidelines.
  • Confidentiality: We will treat your report as confidential and will not share it with any external parties unless legally required to do so.

Bug bounty programme: Please note that we currently do not offer a paid bug bounty programme.