How to contact us
Email security@evidencebundle.tech with the page, browser, steps to reproduce and expected versus observed behavior. Use synthetic data in examples. Contact information is also available in security.txt.
What this covers
The EvidenceBundle website and browser workspace. Problems in an AI provider, hosting platform or other third-party service should be reported to that provider. This page does not authorize testing of their infrastructure.
Keep a report proportionate
Do not access another person’s data, disrupt the service, send credentials or exploit a problem beyond what is needed to explain it. If you encounter private information accidentally, stop and report where it appeared without redistributing it.
What the product protects
The workspace avoids collecting agent credentials and does not automatically transmit dossier contents. Local saving and exported reports still depend on your device and your own handling. They are not an encrypted vault or a managed cloud backup.
What the review does not establish
A filled-in checklist does not prove that an agent or a deliverable is secure. The workspace records human observations. It is not a monitoring service, a penetration test, a signature service or a certification body.