Data leakage policy
Last updated: Nov 4, 2026
If Fluid Attacks detects a breach, it sends emails to tell the involved parties. These emails contain this information:
- The data that the leak or compromise affected
- When the leak or compromise occurred
- How long the leak or compromise continued (as much of this information as is available)
When a breach exposes the private data of many users, Fluid Attacks tells the public by email.
Requirement
This Fluid Attacks requirement applies to the controls on this page:
313. Inform inability to identify users
Other transparency measures
Complaint management
Fluid Attacks manages client complaints, ensuring structured investigation, clear resolution timelines, and a defined escalation matrix for accountability.
Ethics and compliance hotline
Employees and external parties can use the Fluid Attacks ethics and compliance hotline to report concerns anonymously, including AI governance issues.