Data leakage policy
Last updated: Jun 9, 2026
In cases we at Fluid Attacks detect a breach, we send emails to notify the involved parties. These emails contain this information:
- What data was leaked or compromised.
- When the data was leaked or compromised.
- How long the data was leaked or compromised (to the extent this information is available).
When a breach exposes the private data of many users, we notify the public via email.
Requirement
The following Fluid Attacks requirement applies to the controls described on this page:
313. Inform inability to identify users
Other transparency measures
Complaint management
Fluid Attacks manages client complaints, ensuring structured investigation, clear resolution timelines, and a defined escalation matrix for accountability.
Ethics hotline
Fluid Attacks' employees or external parties can create, submit, and keep track cases such as anonymous complaints in our ethics hotline.