What this record establishes
Reviewed policy
An individually reviewed public policy is linked to this program page.
Read the reviewed policy profile →
Directory page 3 explicitly labels this Bug bounty program; full program policy not reviewed; no active/paused status shown.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
Dropbox.comPublished location: http://Dropbox.com | URL | Tier 1 |
sign.dropbox.comPublished location: http://sign.dropbox.com | URL | Tier 1 |
HelloSign.comPublished location: http://HelloSign.com | URL | Tier 1 |
dash.aiPublished location: http://dash.ai | URL | Tier 1 |
dash.dropbox.com | Other | Tier 1 |
api.dropbox.comPublished location: http://api.dropbox.com | URL | Tier 1 |
Dropbox Desktop Application | Other | Tier 2 |
327630330Published location: https://apps.apple.com/app/327630330 | iOS | Tier 2 |
6450553960Published location: https://apps.apple.com/app/6450553960 | iOS | Tier 2 |
1080074001Published location: https://apps.apple.com/app/1080074001 | iOS | Tier 2 |
com.dropbox.dashPublished location: https://play.google.com/store/apps/details?id=com.dropbox.dash | Android | Tier 2 |
com.dropbox.androidPublished location: https://play.google.com/store/apps/details?id=com.dropbox.android | Android | Tier 2 |
HelloFax.comPublished location: http://HelloFax.com | URL | Tier 2 |
docsend.comPublished location: http://docsend.com | URL | Tier 2 |
app.Reclaim.aiPublished location: http://app.Reclaim.ai | URL | Tier 2 |
dropbox.com/paperPublished location: http://dropbox.com/paper | URL | Tier 2 |
*.dropbox.com | Wildcard | Tier 3 |
*.dropboxer.net | Wildcard | Tier 3 |
*.dropboxforum.com | Wildcard | Tier 3 |
*.dropboxpartners.com | Wildcard | Tier 3 |
*.hellofax.com | Wildcard | Tier 3 |
*.docsend.com | Wildcard | Tier 3 |
*.reclaim.ai | Wildcard | Tier 3 |
*.helloworks.com | Wildcard | Tier 3 |
*.hellosign.com | Wildcard | Tier 3 |
*.dash.ai | Wildcard | Tier 3 |
| Asset | Type | Group / eligibility |
|---|---|---|
community.dropbox.comPublished location: http://community.dropbox.com | URL | |
replay.dropbox.comPublished location: http://replay.dropbox.com | URL | |
Boxcryptor | Other | |
Formswift | Other | |
Dropbox Passwords | Other | |
Dropbox Capture Windows Desktop App | Other | |
Dropbox Capture macOS Desktop App | Other | |
com.dropbox.paperPublished location: https://play.google.com/store/apps/details?id=com.dropbox.paper | Android | |
1126623662Published location: https://apps.apple.com/app/1126623662 | iOS |
Capture limits
- The updates page includes a November 24, 2025 scope-policy clarification. It is an announcements/changes index, not an exhaustive version history or full-policy revision date.
- Platform terms default payments to euros unless otherwise agreed; that does not establish the denomination of the displayed dollar amounts.
- The page labels safe harbor as applied, but expanded program-specific terms and authenticated eligibility were not inspected.
- Public policy review only. Asset inventories and operational instructions are omitted. Live terms prevail; this summary grants no authorization.
- Published asset table rows were captured; program detail and out-of-scope prose may add restrictions. An empty out-of-scope table is not unrestricted scope.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty, Profile. No identity match is inferred from a shared company name.