Responsible disclosure

We welcome coordinated disclosure of security issues. Please email security@getautorx.ca (or use the form on Contact with “Security” in the subject) with reproduction steps. Do not test against production patient data. We aim to acknowledge within several business days.

Out of scope

Physical attacks, social engineering, spam, and denial of service are out of scope without prior written consent.