Security

Reporting a vulnerability

We welcome good-faith security research. If you believe you have found a vulnerability in digital BridgIT, please email security@digitalbridgit.com with a description, steps to reproduce, and your contact details. Machine-readable contact details are published at /.well-known/security.txt (RFC 9116).

We acknowledge reports within 3 business days and provide an initial assessment within 10 business days. We will not take legal action against researchers who act in good faith: use only your own test accounts, avoid degrading the service, and give us the chance to fix the issue before public disclosure (at most 90 days). With your consent, we credit you once the issue is resolved.

Security updates and support

digital BridgIT is a centrally hosted cloud service — security fixes are deployed continuously and require no action from users. We commit to providing security updates for a minimum of five years or for as long as the service operates, whichever is longer, and to at least six months' notice before any discontinuation. Critical, actively exploited issues are fixed or mitigated within 72 hours.

How the platform is secured

Data is hosted in the EU. Passwords are stored with bcrypt; sessions use short-lived tokens; optional email two-factor authentication is available to every user; sign-in is protected by progressive lockout and rate limiting. Visitors control the visibility of their contact details, and access to attendee data is restricted to participants and organizers of the same event. A software bill of materials (SBOM) is maintained for every release, and dependencies are audited before deployment.

Regulatory posture

We maintain documentation aligned with the EU Cyber Resilience Act's essential requirements and the NIS2 directive: a vulnerability disclosure policy, incident response procedure with statutory notification timelines (including GDPR Art. 33 notification to the supervisory authority within 72 hours where required), support and update policy, and per-release SBOMs. Data protection details are in the Privacy Policy.

Contact

Security: security@digitalbridgit.com
General: info@digitalbridgit.com