Data leakage policy
Last updated: Sep 23, 2026
In cases we at Fluid Attacks detect a breach, we send emails to notify the involved parties. These emails contain this information:
- What data was leaked or compromised.
- When the data was leaked or compromised.
- How long the data was leaked or compromised (to the extent this information is available).
When a breach exposes the private data of many users, we notify the public via email.
Requirement
The following Fluid Attacks requirement applies to the controls described on this page:
313. Inform inability to identify users
Other transparency measures
Complaint management
Fluid Attacks manages client complaints, ensuring structured investigation, clear resolution timelines, and a defined escalation matrix for accountability.
Ethics and compliance hotline
Employees and external parties can use the Fluid Attacks ethics and compliance hotline to report concerns anonymously, including AI governance issues.