This analysis describes what Progressive's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The requirement for specific detail sets a minimum standard for what constitutes an actionable security report to Progressive.
Interpretive note: The excerpt uses 'for example', indicating the listed items are illustrative rather than an exhaustive enumeration of required details.
A reporter submitting a security issue is required to include specific detail—discovery date and time, reproduction steps, and a Proof of Concept—in their report.
How other platforms handle this
the Receiving Party shall (other than to the extent prohibited by law) provide prior written notice to the Disclosing Party and reasonably cooperate...with any efforts by the Disclosing Party to contest or limit such disclosure requirement
Make sure your app and its Support URL include an easy way to contact you...Failure to include accurate and up-to-date contact information not only frustrates customers, but may violate the law in some countries or regions.
Faire reserves the right to report any activity occurring on or related to the Services to relevant regulatory authorities as required under applicable law.
"Please describe the issue in detail, including (for example): the date and time when the issue was first discovered, details needed to reproduce the issue, and a Proof of Concept.Excerpt from Progressive's Privacy Policy
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The requirement for specific detail sets a minimum standard for what constitutes an actionable security report to Progressive.
A reporter submitting a security issue is required to include specific detail—discovery date and time, reproduction steps, and a Proof of Concept—in their report.
ConductAtlas has identified this type of provision across 273 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Progressive.