# Security Policies and Procedures
This document outlines security procedures and general policies for the `standard`
project.
* [Reporting a Bug](#reporting-a-bug)
* [Disclosure Policy](#disclosure-policy)
* [Comments on this Policy](#comments-on-this-policy)
## Reporting a Bug
We take the security of our systems, products, our employees’ and customers’ information seriously, and we value the security community. We appreciate and encourage security researchers to contact us to report potential vulnerabilities identified in any product, system, or asset belonging to Worldline S.A., its affiliates and subsidiaries (together referred to herein as 'Worldline' or 'we'/'us'/'our'). If you believe you have identified a potential security vulnerability, please submit it to our [Responsible Disclosure Program](https://worldline.com/en/compliancy/responsible-disclosure-program)
Please note, Worldline does not operate a public bug bounty programme and we make no offer of reward or compensation in exchange for submitting potential issues.
## Disclosure Policy
* Let us know as soon as possible upon discovery of a potential security issue, and we will make every effort to quickly resolve the issue;
* Provide us a reasonable amount of time to resolve the issue before any disclosure to the public or a third party;
* Make a good faith effort to avoid privacy violations, destruction of data, and interruption or degradation of our service. Only interact with accounts you own or with explicit permission of the account holder.
## Comments on this Policy
If you have suggestions on how this process could be improved please submit a pull request.