Safe research
Use your own account and sandbox. Avoid social engineering, denial of service, persistence, public disclosure before coordination, and viewing or changing another person's data.
Security reporting
Report a suspected vulnerability without putting restaurant operations or people at risk.
Include the affected surface, reproducible steps, realistic impact, and a safe proof. Do not access data beyond what is necessary to demonstrate the issue.
Response process
OrderDock records receipt, validates scope and severity, communicates status, remediates, verifies the fix, and coordinates disclosure when appropriate.