Responsible disclosure

To report a suspected security issue, email support@taxmycompany.co.uk with a clear description and steps to reproduce it. Do not include passwords, recovery codes, customer data or other secrets.

Please do not access data that is not yours, disrupt the service, or publicly disclose an issue before we have had a reasonable opportunity to investigate. We will acknowledge the report and handle it through our security process.