1. Introduction

Bofin values the security and integrity of its platforms, APIs, infrastructure and digital financial technology systems.

We encourage security researchers, developers, customers and responsible individuals to report potential security vulnerabilities or concerns in a responsible and ethical manner.

2. Reporting Security Vulnerabilities

If you believe you have identified a potential vulnerability, security issue or unintended system exposure affecting Bofin systems, please report it responsibly to our security team.

Reports should include reasonable technical details to help us:

• Identify and validate the issue
• Assess potential impact
• Investigate affected systems
• Implement remediation measures

3. Responsible Research Guidelines

While conducting security research relating to Bofin systems, we request that you:

• Avoid actions that may disrupt services or infrastructure
• Do not access, modify or delete data belonging to others
• Do not attempt financial fraud, transaction manipulation or unauthorized access
• Do not publicly disclose vulnerabilities before remediation
• Do not conduct social engineering, phishing or physical security attacks
• Do not exploit vulnerabilities beyond what is reasonably necessary for verification

4. Unauthorized Activities

The following activities are strictly prohibited:

• Denial-of-service (DoS/DDoS) attacks
• Malware deployment or malicious payload execution
• Credential theft or unauthorized account access
• Data exfiltration or privacy violations
• Financial exploitation or transaction abuse
• Testing against third-party systems not owned or controlled by Bofin

5. Disclosure & Remediation Process

Upon receiving a valid security report, Bofin may:

• Acknowledge receipt of the report
• Review and validate the reported issue
• Prioritize remediation based on severity and impact
• Implement corrective measures where applicable

Resolution timelines may vary depending upon system complexity, third-party dependencies, operational impact and security considerations.

6. Safe Harbor

Bofin intends to support good-faith security research conducted responsibly and in accordance with this policy.

Activities conducted in violation of applicable laws, regulations or this policy may result in legal action, service restrictions or regulatory reporting.

7. Third-Party Systems

Certain services or integrations may involve third-party providers, cloud infrastructure, banking systems, payment networks or external vendors.

This policy applies only to systems and infrastructure owned or directly operated by Bofin.

8. Contact Information

To report security vulnerabilities or responsible disclosure concerns:
Security Email: [email protected]
Support: [email protected]
Company: JANGRAS PRIVATE LIMITED
Website: https://www.bofin.tech