Policy and restrictions
Activity must cease upon unintended sensitive-data or cross-account access. Disclosure needs written consent; disruption, social engineering, physical intrusion and brute force are prohibited.
Eligibility and submission status
Platform membership and researcher identification are required. The program currently supplies no credentials; internally known findings count as duplicates. Platform eligibility requires age 18, or 16 with guardian permission, plus legal and employer authorization.
Logged-out policy and login invitation do not independently establish current intake status.
Advertised rewards
No monetary bounty schedule; currency and numeric bounds remain null.
Advertised schedules and exceptional ceilings are not individual award evidence.
Published scope snapshot
Captured 2026-10-03. Check the current policy for changes before participating.
| Asset | Type | Group / eligibility |
|---|---|---|
*.latchapp.com | Wildcard | Tier 2 |
https://app.ivo.ai/* | Wildcard | Tier 2 |
All Ivo public APIs | Other | Tier 2 |
Ivo Microsoft Word add-in | Other | Tier 2 |
| Asset | Type | Group / eligibility |
|---|---|---|
| No rows captured. This does not establish that the program has no assets or restrictions. | ||
Review limitations
- The no-bounty policy allows an exception only if Ivo expressly confirms it; no such commitment was established.
- No announcement archive or complete revision history was established. Expanded safe-harbor terms and other incorporated documents remain unreviewed.
- Logged-out review; summaries omit inventories and procedures. Live terms prevail; this record grants no authorization.
Sources and provenance
- Ivo AI Vulnerability Disclosure Program policy Ivo AI / Intigriti · reviewed 2026-10-03
- Intigriti Researcher Terms & Conditions Intigriti · reviewed 2026-10-03
- Published Intigriti asset table Ivo AI · reviewed 2026-10-03
Record reviewed 2026-10-03. Snapshot 53796974ace8. Open the complete JSON contract.