cPaperless Security Statement
cPaperless is Committed to Your Security: Your trust is vitally important to us,
not only as a business but as people. We want you to have peace of mind about ordering
from our website, installing and using our products, and recommending cPaperless
to your friends and business associates.
Toward that end, we're pursuing the following courses of action:
- To continually improve our software development process, we're adopting state-of-the-art,
secure development practices.
- To help protect our online shoppers, our online stores and website undergoes periodic
security audits and we use Secure Socket Layer (SSL) encryption to protect every
transaction.
- To work smoothly with the security community, through a process of responsible disclosure,
we promise to act quickly to remedy any vulnerabilities found in our websites or
software and to alert our customers about any potentially dangerous vulnerabilities.
Reporting Security Issues If you have discovered a vulnerability in a cPaperless
product, please email us at: support@cPaperless.com.
Please include a detailed summary of the issue including the name of the product
(e.g., cSecure Mail) and the nature of the issue you believe you've discovered.
Be sure to include an email address where we can reach you in case we need more
information. cPaperless will respond to your notification within a reasonable amount
of time and will quickly work to fix the reported vulnerability.
cPaperless is committed to working with security researchers through the process
of responsible disclosure, which is the practice of notifying a software vendor
before publicly releasing information about a vulnerability. Responsible disclosure
is important to the safety of our customers as it allows cPaperless to resolve security
issues before they are made available to the bad guys. We strongly encourage anyone
who is interested in researching and reporting vulnerabilities in our products to
participate in the practice of responsible disclosure. We will make every effort
to communicate with you while the vulnerability is being fixed and to acknowledge
your report once the security issue has been resolved.