Skip to main content

Security

Report a security issue

We take security reports seriously. Use this channel for vulnerabilities in Nixbin products (including Making Tax Digital early access) or for suspected personal-data incidents.

Contact

security@nixbin.com

Prefer not to use email? Use the contact form and start the message with SECURITY:.

What to include

  • Product or URL affected (e.g. nixbin.com/mtd, MTD Hub)
  • Short description of the issue and steps to reproduce
  • Impact (data exposure, account takeover, etc.)
  • Your contact details for follow-up

Personal-data breaches

If you believe personal data has been compromised, email security@nixbin.com immediately. We aim to acknowledge within one business day and follow our internal incident process, including notifying the ICO and (where HMRC APIs are involved) HMRC within 72 hours of becoming aware of a personal-data breach, as required.

Please do not

  • Access or modify data that is not yours
  • Disrupt service availability (e.g. DoS) without prior written agreement
  • Publicly disclose before we have had a reasonable chance to respond

General product questions: support@nixbin.com.