Report a security issue

If you think you have found a security problem in Doriva, or that information in it has been exposed, please email security@doriva.co.uk. Reports reach us directly and are read by the people responsible for Doriva.

What to include

• What the problem is and where you saw it (the page or address).
• How to see it again, step by step, and what someone could do with it.
• How to reach you. Please don't send anyone else's personal information beyond what is needed to explain it.

What we do

• We aim to acknowledge your report within five working days, and to keep you informed.
• We look into every report, fix what is real as quickly as its seriousness requires, and tell you when it is fixed.
• If personal information was put at risk, we tell the people and organisations the law requires, within its time limits.

Please

• Don't test Doriva's security (scanning, probing or trying attacks) without our written agreement, as our terms of use say. If you come across a problem, stop and tell us.
• Don't look at, change or delete information that isn't yours, and don't disrupt the service for others.
• Give us a reasonable time to put it right before telling anyone else.
• Problems with HMRC, Companies House, a bank or another service Doriva connects to belong to that service: please report them to it directly.

Something else

If you are a client of a practice and think your information has been exposed, tell your accountant as well. For anything about personal information, see our privacy policy.