Vulnerability Disclosure Policy of Techno Horizon Co., Ltd.

Introduction

Techno Horizon Co., Ltd. (hereinafter referred to as “the Company”) strives to maintain robust security measures so that our customers can use our products and services safely and securely. This Vulnerability Disclosure Policy sets forth the handling of vulnerability information regarding the Company’s products and services.

Scope

This policy applies to the products and services provided by the Company. However, for products and services where system modifications can be made by the customer, vulnerabilities resulting from such modifications are excluded from the scope of this policy.

Reporting Vulnerabilities

If you possess information regarding a vulnerability in our products or services, please contact us via our Vulnerability Reporting Form. The reported information will be managed in accordance with the Company’s Privacy Policy.

Handling of Vulnerability Information

Upon receiving a report, we will promptly review and evaluate its contents. We will determine the severity level based on the Common Vulnerability Scoring System (CVSS) and our internal standards, and take necessary measures. We may request the reporter’s cooperation in reviewing and evaluating the vulnerability information.

Public Disclosure of Vulnerability Information

Information regarding vulnerabilities will be published on our website in coordination with relevant parties. The reporter’s name and other identifying information will not be disclosed without their consent. However, this does not apply in cases where disclosure is requested pursuant to laws and regulations or requested by public authorities.

Disclaimer

The Company shall assume no liability whatsoever for any direct or indirect damages incurred by customers (including lost opportunities, loss of data, system downtime, etc.) arising from the use of information disclosed under this policy. The contents of this policy are subject to change, modification, or deletion without prior notice.