Responsible Disclosure Policy

Effective Date: January 1, 2026

Keeping your health information safe is one of our highest priorities. If you believe you have found a security vulnerability in the Regener8MD app, this website, or any Regener8MD system, we want to hear from you and will work with you to resolve it.

1. How to Report

Send your report through our contact page and choose "Security report" as the topic, or call (904) 694-0992 and ask for the Privacy Officer. Please include:

• A description of the vulnerability and where it is located.
• The steps needed to reproduce it.
• The potential impact, and how you can be reached for follow-up.

Do not include anyone's personal or health information in your report.

2. Guidelines for Good-Faith Research

• Do not access, change, download, or delete data that does not belong to you. If you encounter personal or health information, stop, do not keep it, and report it to us right away.
• Do not degrade or disrupt our services, including by denial-of-service testing, spam, or automated scanning that harms performance.
• Do not use social engineering, phishing, or physical attacks against our staff, patients, or offices.
• Give us a reasonable amount of time to fix the issue before sharing any information about it publicly.
• Comply with all applicable laws.

3. Our Commitment

• We will acknowledge your report within five business days.
• We will investigate, keep you informed of our progress, and let you know when the issue is resolved.
• We will not pursue legal action against researchers who act in good faith and follow these guidelines.

4. Scope

This policy covers regener8md.com and the Regener8MD app. Services operated by our laboratories, payment processors, and other vendors are covered by their own security programs; please report issues with those services directly to them. This policy does not create a bug bounty or any obligation to pay for reports.

5. Contact