Security & Trust

Vulnerability Disclosure Policy

DTEN is committed to protecting our customers and the people who use our devices every day. This policy explains how to report a suspected security vulnerability in any DTEN product or service — and how we receive, handle, and disclose it.

Report a Vulnerability How We Respond
01

Commitment & Scope

The best meeting room technology doesn't just serve the room — it protects the people in it. DTEN is committed to the security of every product we build, and we welcome reports from anyone who finds a potential vulnerability.

This policy applies to DTEN-owned hardware and device firmware (D7X series, ONboard 55", DTEN Bar, Mate, Vue Pro, ME Pro, etc.), companion apps and controllers, and DTEN-operated cloud services such as DTEN Orbit. If you're unsure whether something is in scope, report it anyway — we'd rather hear about it.

02

How to Report a Vulnerability

DTEN receives all security reports through one monitored channel — a support ticket on the DTEN Help Center, routed to our Product Security team — so every report is tracked and auditable.

Submit a security report

1 On the DTEN Help Center, select “Submit a Support Ticket” (top-left).
2 Choose “Security / Vulnerability Report” as the request type so it routes to Product Security.
3 Include the affected product and firmware version, impact, and steps to reproduce — attach any proof-of-concept, logs, or screenshots. Request our PGP key if you need an encrypted channel.
Submit a Support Ticket

Please choose the request type that matches your issue — select “Security / Vulnerability Report” for security vulnerabilities, and the corresponding ticket type for product help or other requests.

Report in good faith. Give us reasonable time to investigate and remediate before disclosing details publicly or to a third party. We'll keep you informed throughout.

03

How We Handle Your Report

Every report follows a defined process managed by Product Security. Our target response times are below; complex issues may take longer, and we'll keep you updated when they do.

1

Receipt

Automatic

Your ticket is logged with a tracking reference and routed to Product Security the moment it is submitted.

2

Acknowledgement

Within 3 business days

We confirm receipt and may ask clarifying questions to help us reproduce the issue.

3

Triage & Verification

Status within 15 business days

We verify the vulnerability, assess severity (CVSS), confirm affected products, and share an initial assessment.

4

Remediation

Critical fixes within 90 days

Confirmed issues are fixed via a firmware or software update. Critical and high-severity issues are prioritized and expedited where feasible.

5

Disclosure & Credit

Coordinated

Once a fix is available, we publish an advisory, notify affected customers, and — with your permission — credit you.

04

Coordinated Disclosure & Safe Harbor

DTEN follows a coordinated disclosure model. Please give us a reasonable opportunity to remediate before any public disclosure, and don't share details with third parties without our authorization. All vulnerability information is treated as confidential until a fix is released and a disclosure date is agreed.

Safe harbor. If you make a good-faith effort to comply with this policy, DTEN will consider your research authorized, will not pursue legal action against you, and will work with you to resolve the issue.

Please do

  • Test only against your own devices and accounts.
  • Stop and report as soon as a vulnerability is confirmed.
  • Keep details confidential until a fix is released.

Please do not

  • Access, modify, or destroy data that isn't your own.
  • Run denial-of-service or destructive scans.
  • Use social engineering, phishing, or physical attacks.
05

Firmware Maintenance & Updates

DTEN maintains the security of its devices throughout their supported life with a defined firmware maintenance and update program.

5 years
Minimum supported life cycle from Release-to-Manufacturing (RTM).
10 years
Component design life — hardware engineered to last a decade.
OTA
Delivered over-the-air, applied during scheduled nightly windows.

Security patches are delivered over-the-air and bundled with each device's regular firmware release, applied automatically during scheduled nightly maintenance windows; administrators can review update status in DTEN Orbit. DTEN commits to security and maintenance updates for at least five (5) years from a product's RTM date, with hardware designed for a ten (10) year service life. Critical fixes may be released ahead of the regular cadence, and end-of-life timelines are published in advance.

06

Out of Scope

The following are generally not eligible under this policy. If you're unsure, you may still submit a report.

Theoretical vulnerabilities that require significant, unlikely user interaction or already-compromised devices to exploit.

Output from automated tools or scanners without a demonstrated, validated security impact.

Missing security headers, weak TLS configurations, or other best-practice recommendations without a concrete, exploitable impact.

Vulnerabilities in third-party platforms (such as Zoom or Microsoft Teams) or hardware not manufactured by DTEN. Please report those to the respective vendor.