Penetration testing

Last updated: 11th of June 2024

1. Before testing

Before you initiate any tests towards our system, we require you to reach out to support@ipaper.io beforehand, so we can coordinate the test with you and your team.

2. The tests

We would like, as detailed as possible, to know how and which tests you will be performing towards our systems.

3. Time of test

We ask you to define a timeframe that is then approved with us in advance before you proceed with any testing.

4. Non-destructive

Should the pen-tester find a flaw that could manipulate, damage or delete data, they are not permitted to do so, but should report it to us.

5. Load testing

Is not permitted. Please refer to our SLA and guarantees/references for this instead.

6. Point of contact

We require an available contact person in case we need to reach out during testing for any reason.

7. Receive a copy of the report

We require a copy of the pen-test report once completed.

8. Right to terminate test

We reserve the right to stop the test at any point for any reason, in the event we feel this affects current customers on our platform or go out of scope for the agreed upon terms.