Automatticcareers

Missing Vulnerability Disclosure

Publish the disclosure path and safe-harbor terms together.

Missing Security Contact

Expose a clear public security contact or disclosure mailbox.

Missing Incident Response

State how incidents are detected, escalated, and communicated.

Missing Security Whitepaper

Provide a public security whitepaper when the product depends on trust-sensitive claims.

Missing Certifications

Only publish certification claims alongside a public attestation artifact.

Missing Security Overview

Add a concise overview of the security program and where the supporting evidence lives.

Missing Incident Communication

Document how customers are notified and where public incident updates live.

Missing Status Page

Link the status page from the trust surface if it is part of the buyer review path.

Missing Privacy Policy

Clarify what personal data you collect, process, retain, and disclose.

Missing Privacy Center

Create a single public privacy hub that links policy, rights, and preference actions.

Missing Data Subject Request Portal

Expose a public rights-request path for access, deletion, correction, and portability.

Missing Consent Management

Clarify how consent is captured, changed, and withdrawn.

Missing Data Breach Notice

Explain how breach notification works and who is notified.

Missing Data Processing Addendum

Make the DPA request path easy to find for customers and partners.

Missing Subprocessors List

Publish a current subprocessor or vendor list with update cadence.

Missing AI Usage Policy

Explain how AI is used, reviewed, and bounded in public-facing products.

Missing Responsible AI Principles

Publish a short principle set that maps to actual product controls.

Missing Customer Data Training Policy

Clarify whether customer prompts, files, and outputs can train or improve models.

Missing Model Provider Disclosure

State which model or provider services are used and where customer data may flow.

Missing Prompt Logging Policy

Clarify whether prompts, conversations, and outputs are logged or retained.

Missing Model Card or System Card

Publish a model or system card if the site makes substantial AI claims.

Missing AI Evaluation or Safety Report

Provide a public evaluation or safety summary when AI claims are central.

Missing Transparency Report

Publish a public transparency report when the product makes AI capability claims.

Missing Model Limitations

Describe where the model or AI system fails, degrades, or needs human review.