Security

Report a security issue

Found a vulnerability or security risk in Quarterwise? Tell us using the form below, or email [email protected]. We acknowledge every report within one business day.

So we can acknowledge and follow up with you.
Please don't include other people's personal data. Don't test against real customer accounts.

How we handle reports

  • We acknowledge your report within one business day.
  • We investigate and keep you updated on progress where appropriate.
  • If a report indicates a personal-data breach, we notify HMRC and the ICO within 72 hours, and affected customers without undue delay, as required.

Please report responsibly: give us reasonable time to investigate and fix the issue before any public disclosure, don't access or modify other people's data, and don't run tests that could disrupt the service for others. We're grateful for reports made in good faith.

Prefer email? Write to [email protected].