English responsible disclosure

At INTER, we consider the security of our ICT systems very important and strive for high-level protection. Despite our efforts to secure our ICT systems, vulnerabilities may still be present. Here you can read how INTER handles such situations.

If you find a vulnerability and/or security breach in one of our systems, we would appreciate it if you inform us so we can take action as quickly as possible. Please note: our responsible disclosure policy is not an invitation to actively scan our network for vulnerabilities. We want to collaborate with you to better protect our systems and resolve the issue as soon as possible. Therefore, we kindly ask you to share this information with us.

We therefore ask you to:

  • Email your findings exclusively to privacy@inter.nl
  • Not exploit the vulnerability you have found by, for example, downloading data or viewing, deleting, or modifying third-party information
  • Not delete or modify any data or components of our software system
  • Not share your findings with others until the issue has been resolved
  • Delete all confidential information you obtained through the vulnerability immediately after it has been fixed
  • Refrain from using attacks on physical security, social engineering, distributed denial of service, spam, or third-party applications
  • Provide us with sufficient information (such as a detailed description including IP addresses, logs, steps to reproduce, screenshots, etc.) to reproduce the problem so we can address it as quickly as possible

We promise you that:

  • We will respond to your report as soon as possible with our assessment of the report and an expected date for a solution
  • We will treat your report confidentially and will not share your personal information with third parties without your consent, unless it is necessary to fulfill a legal obligation
  • We will keep you informed of the progress in resolving the issue
  • In any communication about the reported issue, we will, if you wish, credit you as a pioneer

Our goal: We aim to resolve all ICT issues as quickly as possible and would be happy to be involved in any publication about the issue after it has been resolved.

Changes: We reserve the right to revise this policy from time to time. Therefore, please check our website regularly for the latest version of our Responsible Disclosure.