Security

Effective Date: 19 October 2026 · Version 1.0

1. Reporting a Security Issue

If you believe you have found a security vulnerability in OPS360, or you suspect a security incident or data breach affecting OPS360 or its customers, please email security@ops360.net. This mailbox is monitored by the Delisys Technologies Ltd team responsible for the security of the OPS360 platform.

Please report the issue to us privately and do not disclose it publicly until we have had a reasonable opportunity to investigate and resolve it.

2. What to Include

To help us investigate quickly, please include as much of the following as you can:

• A description of the issue and its potential impact.
• The affected URL, application (web app, OPS360 Connect, OPS360 POS or API) and, where relevant, the region or business account involved.
• Step-by-step instructions to reproduce the issue, with screenshots if helpful.
• The date and time you observed the issue.
• Your name and a way to contact you, if you would like us to keep you updated.

Please do not include passwords, payment card details or other sensitive personal data in your report unless it is essential to describing the issue.

3. Our Commitment

When you report a security issue to us in good faith, we will:

• Acknowledge your report within 2 business days.
• Investigate the issue and keep you updated on our progress.
• Let you know when the issue has been resolved.
• Handle your report and contact details confidentially.

We will not take legal action against anyone who, in good faith, researches and reports a vulnerability within the scope of this page, provided they make a reasonable effort to avoid privacy violations, data loss and disruption to our services and customers; access only the minimum data necessary to demonstrate the issue; do not modify or retain customer data; and give us a reasonable period to resolve the issue before any disclosure.

Wherever possible, please test only against an account you own. If you encounter data belonging to another person or business, stop, do not keep a copy, and tell us straight away.

4. Out of Scope

The following activities are not permitted and are outside the scope of this page:

• Social engineering or phishing of our staff, partners or customers.
• Denial-of-service attacks, or any testing that degrades the availability of OPS360.
• Physical attacks on our offices, data centres or equipment.
• Automated scanning that generates a high volume of requests or spam.
• Testing of third-party services that we use but do not operate.

5. Customers: Suspected Account Compromise

If you are an OPS360 customer or user and suspect that your account, or your business's account, has been accessed without authorisation, please email security@ops360.net as soon as possible. Include the business name, the affected user's email address, and when and what you noticed. In the meantime, change your password and ask your OPS360 account administrator to review user access.

Where an incident affects personal data that we process on behalf of a business customer, we will notify that customer in line with our Data Processing Agreement.

6. Machine-Readable Contact

Our security contact details are also published in the standard security.txt format (RFC 9116).

Related: Privacy Policy · Data Processing Agreement · Report an Issue

© 2026 Delisys Technologies Ltd and its Partners. All rights reserved.