Policy | Family 3, Security, Privacy & Trust Disclosures

Vulnerability Management Policy

POL-GL-121v1.0.0NDAPolicyGL1234S3 Evaluation & Assurance

DIS-GL-017 is the customer-facing disclosure. POL-GL-059 is the public Vulnerability Disclosure Policy governing external researchers. This is the internal rule set, and its remediation windows are the same numbers Pensieve Labs publishes. There is not a private, more relaxed set.

Permalink trust.pensievelabs.org/documents/POL-GL-121

Classification

NDAMutual NDA required

The five axes

Kind: Policy
Tier: Mutual NDA required
Direction: Pensieve → Hospital
Lifecycle: S3 Evaluation & Assurance
State: Published templateTokens resolve live. An issued instance freezes its render, its token values and its hash.

Record

Doc ID: POL-GL-121
Version: v1.0.0
Last modified: 31 July 2026
Review due: 31 January 2027
Owner: Security
Family: 3. Security, Privacy & Trust Disclosures
Language: en-IN
Retention: 8 years after the record closes

Execution

Signature: No signature
Stamp duty: No stamping required
Letterhead: standard

Applicability

Jurisdiction: Global (GL)
Applies to: 1234Dedicated, Shared, Customer Cloud, On-Premise
Lane: Assurance
Exit gate: Security review closed; no open blockers
Critical path: Not on the critical path

Integrity

Length: 1,413 words
SHA-256: 9DA171C9B4CE9da171c9b4cec72811e4e446f5e40bcaafd23f03726be88cc21f44d5a3e843d5

No-repetition rule

This document is the source of truth for: trust:/policies/vulnerability-management, trust:/documents/POL-GL-121

Those surfaces render this text from here. They do not keep their own copy, so they cannot drift from it.

Depends on

Artefacts this one references or cannot be issued without.

Referenced by

Artefacts that would be blocked if this one were missing or out of date.

Mutual NDA required

Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.

Accept the mutual NDATime to clear: Target 4 business hours | A person at Pensieve reviews this one.

Where you are

PublicCleared
EmailNot cleared
NDARequired for this document
ClientNot cleared

What this page did not send you

The body of POL-GL-121 was not rendered and was not transmitted to your browser. Everything you can see here (the classification, the summary, the dependency graph, the integrity hash) is register metadata, and it is published deliberately. Knowing that a document exists is not the same as reading it, and hiding the title only makes you send an email.

Available to you right now, without clearing anything

From the same family: Security, Privacy & Trust Disclosures.