Security Policy

This Security Policy outlines how ACL manages vulnerability disclosures, security communications, and researcher engagement. Our goal is to protect users, data, and services by encouraging responsible reporting and timely remediation of security issues.

This policy applies to:

• All ACL web properties, including www.acpl.in.net.
• Associated APIs, applications, and services hosted under the ACL domain.
• Any third-party integrations where ACL is the data controller.

We encourage security researchers to report vulnerabilities responsibly.

• Do not exploit vulnerabilities beyond what is necessary to demonstrate the issue.
• Do not access, modify, or delete data belonging to others.
• Do not disrupt services or perform denial-of-service testing.
• Provide clear, reproducible steps when reporting.

• We will acknowledge receipt of your report within 72 hours.
• We will provide updates on remediation progress.
• We will notify you when the issue is resolved.
• If applicable, we may publicly credit researchers (with consent) on our Acknowledgments page.

Researchers acting in good faith under this policy will not face legal action from ACL. We consider vulnerability research and reporting within these guidelines to be authorized.

This policy is reviewed annually and updated as needed.

Effective Date: February 2026

Next Review Date: February 2027