Effective from 4th March 2026

 

Introduction

Daikin Australia Pty Ltd is committed to maintaining the security and integrity of its products, systems, and digital assets.
This policy aims to encourage the responsible disclosure of potential security vulnerabilities and to establish a clear process for reporting and resolving them in accordance with applicable legislation and best practices.

Reporting a Vulnerability
If you identify a potential vulnerability in any Daikin Australia product, system, or service, please report it to: vulnerability@daikin.com.au

Information submitted under this policy will be used solely to investigate, mitigate, or remediate the reported issue. Your identity and contact details will not be shared without your express permission.

Information to Include

To assist our security team in assessing and addressing the report efficiently, please provide:

• Product or system name and version (or other identifying details)

• Description of the vulnerability and how it can be reproduced

• Potential impact or risk if exploited

• Proof-of-concept or supporting evidence (e.g. screenshots, logs, or code snippets)

• Your contact information (optional, but recommended for coordinated follow-up)

Our Response

• Daikin Australia will acknowledge receipt within 7 business days and may request further information if required.

• The Vulnerability Response Team will assess the validity and severity of the report and, where appropriate, develop and deploy corrective actions such as configuration changes, patches, or software updates.

• We will provide an update on the investigation status every 30 business days until the reported security issues are resolved.

• The Reporter will receive periodic status updates and notification once remediation is complete.

Confidentiality and Responsible Disclosure

Daikin Australia is committed to responsible and coordinated disclosure.

Reporters are requested not to publicly disclose information regarding a vulnerability until Daikin Australia confirms that appropriate mitigation has been implemented or grants written authorization to disclose. Premature disclosure may expose users to undue security risk.

Policy Review
This policy is subject to periodic review and may be amended to reflect evolving technology, legislation, and security best practices.