Skip to main content
Back to Home
Trust & Security

Responsible Disclosure

Help us keep Fininvo safe. How to report a vulnerability and what you can expect from us.

Last Updated

June 22, 2026

Effective Date

July 22, 2026

Version

2.0

This document is published by Fininvo, a trade name of Prashbi Global Services Pvt. Ltd., a company incorporated under the laws of India (CIN: U52100KA2020PTC133490), with its registered office at Tholons Tower, 346 HIG, 17th Cross Rd, Dollars Colony, R.M.V. 2nd Stage, Bengaluru, Karnataka 560094, India. References to "Fininvo", "we", "us", or "our" in this document refer to Prashbi Global Services Pvt. Ltd..

1

Our commitment

We value the work of security researchers and the broader community in keeping Fininvo and our customers safe. If you discover a vulnerability, we ask you to report it to us privately so we can fix it before it is disclosed publicly.

2

How to report

Email security@fininvo.com with a clear description of the issue, the steps to reproduce it, the affected URL or feature, and any supporting evidence. We acknowledge reports promptly and keep you informed of progress to resolution.

3

Scope

In scope: the Fininvo web products and mobile apps and their supporting APIs. Out of scope: third-party services we do not control, social-engineering of our staff, physical attacks, denial-of-service testing, and automated scanning that degrades the service.

4

Guidelines

  • Do not access, modify or delete data that does not belong to you.
  • Use only test accounts and your own data where possible.
  • Do not run denial-of-service tests or bulk automated scans.
  • Give us reasonable time to remediate before any public disclosure.
  • Do not exploit the issue beyond what is necessary to demonstrate it.
5

Safe harbour

If you make a good-faith effort to comply with these guidelines, we will treat your research as authorised, will not pursue legal action against you for it, and will work with you to understand and resolve the issue quickly. If legal action is initiated by a third party against you for activities conducted under this policy, we will make it known that your actions were authorised.

Security Reporting

Registered Office

Prashbi Global Services Pvt. Ltd.
Tholons Tower, 346 HIG, 17th Cross Rd, Dollars Colony,
R.M.V. 2nd Stage, Bengaluru, Karnataka 560094, India

CIN: U52100KA2020PTC133490