Security and responsible disclosure

Report responsibly

Use the public inquiry form, select Platform partnership and begin the objective with “Security disclosure”. Do not include participant data, credentials, access tokens, private keys, proprietary biological datasets or regulated records in the initial submission.

Good-faith research

• Do not disrupt service or degrade availability.
• Do not access, alter, export or retain records without authorisation.
• Do not perform social engineering, upload malware or attempt persistence.
• Provide sufficient reproducible detail for safe assessment.

Platform controls

HumanTwin Bio uses authenticated access, role-aware policies, organisation isolation, controlled transitions, audit events and evidence-integrity controls. Security responsibilities remain shared with authorised organisations and infrastructure operators.