Security & Vulnerability Disclosure

Our Commitment to Information Security

At PharmD Live, protecting the confidentiality, integrity, and availability of information entrusted to us is fundamental to our operations and our commitment to patients, healthcare partners, and other stakeholders. We maintain an information security and privacy program designed to safeguard sensitive information, including electronic protected health information (ePHI), support compliance with applicable regulatory requirements, and promote the security and reliability of our services.

We recognize the importance of responsible vulnerability reporting and welcome good-faith notifications of potential security concerns affecting systems and services under PharmD Live’s control.

Reporting a Security Vulnerability

If you identify a suspected security vulnerability, unauthorized access concern, potential data exposure, or other security weakness involving PharmD Live’s systems or services, please contact:

When submitting a report, please include, where available:

• A description of the suspected vulnerability or security concern.
• The affected website, system, application, or service.
• Steps to reproduce or understand the issue, without accessing sensitive information unnecessarily.
• The potential security impact.
• Your contact information, if you wish to receive follow-up communications.

Responsible Disclosure Guidelines

We ask individuals reporting potential vulnerabilities to act responsibly and avoid activities that may compromise patient privacy, disrupt services, or expose confidential information. Please refrain from accessing, modifying, downloading, or disclosing information without authorization; disrupting system availability; conducting denial-of-service attacks; or performing intrusive security testing without prior written authorization.

Submission of a vulnerability report does not constitute authorization to test PharmD Live systems or third-party environments.

Security Report Review and Response

Security reports received through the designated contact channel will be reviewed and assessed based on their nature, potential impact, and urgency. Where appropriate, PharmD Live will coordinate further investigation, remediation, and communication with relevant internal personnel, service providers, or affected stakeholders.

Security matters involving protected health information will be addressed in accordance with applicable privacy, security incident response, and breach notification requirements.

Confidentiality and Responsible Communication

We request that individuals reporting suspected vulnerabilities avoid publicly disclosing technical details or sensitive information while the matter is under review. PharmD Live respects responsible security reporting and is committed to addressing credible security concerns through appropriate internal processes.

Scope and Limitations

This disclosure guidance applies to security concerns involving publicly accessible PharmD Live systems and services under our ownership or administrative control. It does not authorize testing of client environments, third-party applications, healthcare provider systems, or other infrastructure not expressly approved for testing.