Vulnerability Disclosure Policy
Greenphard Energy (“we”, “us”) works to protect the information of our customers and stakeholders through security measures. If you discover a security vulnerability in our systems or services, we ask for your cooperation in responsible disclosure.
Scope
This policy applies to the services we provide.
How to report
If you discover a vulnerability, please contact:
Please include as much of the following information as possible:
- Vulnerability type and summary
- Affected system or URL
- Steps to reproduce (please attach screenshots or logs where available)
- Expected scope of impact
Our response
After receiving a report, we respond as follows:
- 1. Acknowledgement: we will acknowledge receipt within 3 business days.
- 2. Investigation and assessment: we review the report and assess its severity.
- 3. Response and remediation: we work promptly to fix confirmed vulnerabilities according to priority.
- 4. Updates: we provide the reporter with progress updates where possible.
Disclosure of vulnerability information
Information about confirmed vulnerabilities will be published on our website as needed.
We will not publish information identifying the reporter.
What we ask of reporters
We ask reporters to observe the following:
- Limit investigation and reporting to systems and activities you are legitimately authorised to access.
- Do not access, alter or delete third-party data.
- Do not disclose the vulnerability before we complete remediation.
- Do not act with the intention of disrupting public infrastructure or our services.
Safe harbour and acknowledgements
If you report a vulnerability in accordance with the guidelines above, we will not take legal action against the act of reporting.
This policy may be changed or revised without notice.
Contact
Company: Greenphard Energy Inc.
Representative: Takehito Nishiyama, Representative Director & CEO
Head office: SN Building 9F, 1-4-22 Kaigan, Minato-ku, Tokyo 105-0022, Japan
Email: info@greenphard.com
Updated: 6 April 2026