Responsible Disclosure

Version 2026-2, effective 2026-10-30.

This policy of Volt Time B.V. (KvK 77488873), also trading as Plugchoice ("we"), covers our Plugchoice systems: the Plugchoice platform, apps, API and SDK, plugchoice.com and the subdomains we operate, and the addresses on partner domains that point to our platform. Volt Time systems and Volt Time chargers fall under the Responsible Disclosure at volttime.com.

Report a vulnerability to security@plugchoice.com with enough detail to reproduce it.

Do not exploit it beyond showing it, access, change or delete other people's data, send commands to chargers you do not own, copy, decompile or publish software or firmware except as the law permits, use physical attacks, social engineering, denial of service or spam, attack third-party services, or tell others before we have fixed it.

What we do. If you follow this policy, we will not report you to the police or claim against you for what it allows; we cannot bind the public prosecutor or others. We share your report only as far as needed to fix the problem, also with a supplier that must fix it, and your personal details only with your permission or where the law requires. With your permission, we may name you as the finder. We may reward a report of a problem we did not know about.

Previous versions: Responsible Disclosure 2026-1, superseded on 30 October 2026