Not an HMSThe revenue layer above the one you already run — orchestration for hospitals, health aggregation for employers.See the difference →

Home · Trust

Vulnerability disclosure

If you have found something, tell us before you tell anyone else and we will work with you.

NADI · DOCUMENT
● Status current
● Plain language yes
● Contact stated
✓ published, dated, binding
  • Report to info@xdqlabs.com.
  • We acknowledge, investigate, and tell you what we found.
  • We credit reporters who want to be credited.
  • We do not run a paid bounty today, and we say so rather than implying one.
Please do not test a live workspace

A customer’s workspace holds real patient records. Ask us and we will point you somewhere safe to look.

Read the rest of it.

Every one of these pages says what we do, what we do not, and who to write to when it matters.