What to report
- a suspicious message or impersonation of Behric;
- unexpected access to another person’s case;
- a lost or unauthorisedly shared portal link;
- suspected wrongful disclosure of personal or confidential data;
- a technical vulnerability affecting confidentiality, integrity or availability.
How to report
Use the security contact displayed with this version. Send a short description, URL, time and safe reproduction steps. Do not send passwords, live tokens, identity documents or whole databases.
Responsible conduct
Do not access additional data, modify it, disrupt the service or publish the issue before Behric has reasonable time to assess it. This page creates no bounty programme or permission for otherwise unlawful activity.
Personal-data breach
Behric records the awareness time, preserves evidence, assesses risk and, where applicable, reports to the Agency within the statutory 72-hour deadline. Individuals receive a clear notice without undue delay where the risk is high.