Security
Approved policy ยท 2026-10-03
Security controls include restricted database access, staff multi-factor authentication, private evidence storage, protected mutations and bounded external fetching.
Keep account access secure and use the account security settings to manage sessions. A report about incorrect event information belongs in the event report form.
For a suspected vulnerability, retain the affected page, time, reproducible steps and a description of the impact. Avoid accessing another person's data, disrupting the service or publishing private information.
Report suspected vulnerabilities privately to support@find.education, operated by Letts Learn Pty Ltd, with Security in the subject. Do not email passwords, API keys or unnecessary personal records. This page does not authorise intrusive testing, promise a bug bounty or guarantee a response deadline.