What this record establishes
Reviewed policy
An individually reviewed public policy is linked to this program page.
Read the reviewed policy profile →
Directory page 1 explicitly labels this Responsible disclosure; full program policy not reviewed; no active/paused status shown.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
*.truelayer.com | Wildcard | Tier 1 |
*.zimpler.net | Wildcard | Tier 2 |
*.sandbox.zimpler.net | Wildcard | Tier 3 |
*.staging.zimpler.net | Wildcard | Tier 3 |
*.truelayer-sandbox.com | Wildcard | Tier 3 |
checkout-playground.zimpler.comPublished location: http://checkout-playground.zimpler.com | URL | Tier 3 |
devdocs.zimpler.comPublished location: http://devdocs.zimpler.com | URL | Tier 3 |
identify.zimpler.comPublished location: http://identify.zimpler.com | URL | Tier 3 |
okta-oauth2.zimpler.comPublished location: http://okta-oauth2.zimpler.com | URL | Tier 3 |
swish-playground.zimpler.comPublished location: http://swish-playground.zimpler.com | URL | Tier 3 |
zimpler-merchant.zimpler.comPublished location: http://zimpler-merchant.zimpler.com | URL | Tier 3 |
| Asset | Type | Group / eligibility |
|---|---|---|
*.zimpler.com | Wildcard |
Capture limits
- The separate paid program does not change this VDP’s explicit no-reward policy.
- Anonymous-reporting language coexists with platform-account requirements; anonymous intake was not verified.
- No revision archive, expanded safe-harbor text or complete incorporated-document review was established.
- Logged-out review; summaries omit inventories and procedures. Live terms prevail; this record grants no authorization.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
Appears in Discovery, Profile. No identity match is inferred from a shared company name.