Security & Vulnerability Disclosure

How to report a security problem to us, and what we commit to in return.

Updated 8 October 2026 · TD-SEC-2026-10

1. Reporting

Email security@totuldigital.com with what you found, how to reproduce it and the impact you see. Please do not include other people's personal data beyond what is needed to show the issue.

We acknowledge within 72 hours, keep you informed, and tell you when it is fixed. We are happy to credit you when the fix is published, if you wish.

2. Safe harbour

If you act in good faith, stay within scope, avoid privacy violations and service disruption, do not access or keep data that is not yours beyond what is needed to prove the issue, and give us reasonable time to fix it before disclosure, we will not take legal action against you for your research.

3. Scope

In scope | Out of scope
totuldigital.com, totuldigital.ro and their subdomains, including the client portal at totuldigital.com/portal and mail.totuldigital.ro | Denial of service, spam, social engineering of staff or suppliers, physical attacks, attacks on other customers' data, findings in third-party services (e.g. OVHcloud, Cloudflare)

4. Security incidents affecting you

If you believe your account or Cloud Office has been compromised, write to security@totuldigital.com immediately and end active sessions from Settings → Security & Devices.