Security Commitment and Vulnerability Disclosure
Last updated: March 5, 2026
1. Our Security Commitment
FastForward is committed to protecting the security, confidentiality, and integrity of customer, partner, and user information. Security is a foundational principle at FastForward. We continuously work to improve the protection of our systems, infrastructure, and customer data through security controls, monitoring, and responsible disclosure.
We design and operate our systems in alignment with SOC 2 security and privacy principles and industry best practices for secure cloud infrastructure and application development, including:
- Access control and least privilege
- Secure system architecture and development practices
- Encryption of data in transit and at rest where appropriate
- Continuous monitoring and logging
- Incident response and recovery procedures
- Protection of personal and sensitive data
- Vendor and infrastructure security management
Security and privacy are treated as core business responsibilities across our organization.
2. Security Governance
Security is managed by designated leadership and integrated into engineering, infrastructure, and operational processes. Security controls, risks, and procedures are reviewed periodically to maintain a strong and continuously improving security posture.
3. AI and Platform Security
FastForward develops and operates AI-enabled software platforms. Security controls are integrated into the design, development, and operation of these systems to help protect customer data and ensure responsible system operation.
4. Vulnerability Disclosure Program
We welcome responsible disclosure of security vulnerabilities.
If you believe you have discovered a security issue, please report it to: [email protected]
We will acknowledge receipt of vulnerability reports and work to investigate and remediate validated issues in a timely manner.
When reporting a vulnerability, please include:
- A clear description of the issue
- Steps to reproduce, if applicable
- Any relevant screenshots or logs
- The affected domain, system, or feature
5. Responsible Disclosure Guidelines
We ask that you:
- Act in good faith
- Avoid accessing or modifying user data
- Avoid actions that could disrupt services, compromise user privacy, or degrade system availability.
- We ask researchers to allow us reasonable time to investigate and remediate issues before publicly disclosing any vulnerability.
- Do not publicly disclose the issue before resolution
We support responsible security research conducted in good faith. We will not pursue legal action against researchers who report vulnerabilities responsibly and in accordance with this policy.
6. No Bug Bounty or Compensation
FastForward does not currently operate a public bug bounty program.
We do not offer monetary rewards or compensation for vulnerability reports.
Responsible disclosure helps keep our systems and users safe, and we appreciate the effort and professionalism of the security community.
7. Scope
This policy applies to:
- www.ff.tech
- Subdomains and infrastructure owned or operated by FastForward
- Applications, APIs, and services provided by FastForward
Third party services or dependencies are out of scope and should be reported to their respective owners.
8. Questions
For security related questions or to report vulnerabilities, contact: