Responsible Disclosure

Security is our discipline, and we welcome reports from researchers who help us keep our systems and our clients safe. DatSov is a trading name of ProSolve Ltd. We are committed to working with the security community in good faith and to acknowledging every legitimate report we receive.

This policy applies to:

• This website and its supporting infrastructure.
• Publicly reachable services operated directly by DatSov.

Client environments and third-party platforms we integrate with (such as our form and scheduling processors) are out of scope; please report issues affecting those directly to the relevant provider.

Send your report to contact@datsov.co.uk with enough detail for us to reproduce the issue — affected URL or component, a clear description, reproduction steps, and any supporting evidence. If you wish to encrypt your report, ask us for a key when you make first contact.

When investigating, please:

• Act in good faith and avoid privacy violations, data destruction, or service disruption.
• Only interact with accounts you own or have explicit permission to test.
• Give us a reasonable opportunity to remediate before any public disclosure.
• Avoid automated scanning that degrades service availability.

When you report in line with this policy, we will:

• Acknowledge receipt of your report promptly.
• Provide an assessment and keep you informed of remediation progress.
• Not pursue or support legal action against good-faith research conducted within this policy.
• Credit you for your discovery where you would like recognition.

We consider security research and vulnerability disclosure activities conducted in accordance with this policy to be authorised. We will not treat such activity as a breach of our terms, provided you comply with the guidelines above and make a genuine effort to avoid harm to us, our clients, and third parties.