Reporting a Security Problem

Security

Last updated October 18, 2026

The short version. If you find a security problem in Democura, email security@democura.com. We read every report and reply within three business days.

What This Covers

• democura.com, this website.
• app.democura.com, the app for practice staff.
• my.democura.com, the app for patients.

What to Send

Tell us what you found, where, the steps that show it, and what someone could do with it. Screenshots and requests help. Please never send patient information in a report. If you came across someone else's data, stop there, do not keep a copy, and tell us what you saw.

How to Test

• Use only your own accounts and made-up data.
• Never read, change or delete data that is not yours.
• No denial of service, spam, social engineering or physical attempts.
• Give us a reasonable time to fix the problem before you share it publicly.

What We Do

We confirm your report within three business days, keep you posted on what we find, and tell you when a fix is in place. If you want credit, we will name you once the problem is fixed. We do not offer payment for reports.

Other Questions

For anything else, including questions about an account or your health information, use the Contact page. The same contact details are at /.well-known/security.txt, in the standard format security researchers use.