Element’s Responsible Disclosure Program (‘SRDP’)

Element holds ourselves to the highest standards of integrity to ensure your information is safe within our care. Our Responsible Disclosure Program (SRDP) provides the security research community a channel to communicate directly with us to identify rare but possible vulnerabilities as we all work to maintain the security of our systems and data.

If you believe you have identified a potential security vulnerability, please submit it at responsibledisclosure@elementcorp.com following the submission format outlined below. Thank you in advance for sharing your findings.

Please note, Element does not operate a public bug bounty program and does not offer rewards or compensation in exchange for submitting potential issues.

Reporting a Vulnerability

Please report all perceived vulnerabilities by email to SRDP@elementfleet.com. To aid our review, please include as much detail as possible in your report including, but not limited to:

The website or mobile application.

Steps taken and any tools used.

Evidence (screen captures).

Your assessment of perceived risk.

Any proposed solution.

We will acknowledge your email with an automatic reply. We will contact you as required once we review your findings. We appreciate all reports but may not be able to share specific investigative steps or resolution with you.

Thank you for your submission.

Guidelines for Reporting

To ensure the best outcome, please review the guidance below.

You are at least 18 years of age and/or have your parent or guardian’s permission to contact us.

You will not share, compromise or disclose any personally identifiable information.

You will not engage in any activity that could harm Element, our customers, employees, services and/or assets.

You will only conduct security and vulnerability research with accounts you own.

You will not use social engineering or brute force methods to attempt to obtain confidential credentials.

You agree to comply with all applicable laws and regulations in connection with your security research activities and your participation in SRDP.

You will allow us a reasonable opportunity to investigate and respond prior to contacting anyone else about this matter.