Reporting AI-Related Concerns

dotCMS integrates AI capabilities into its platform, including AI-assisted content generation, recommendations, and workflow automation. In accordance with our AI Management System (aligned with ISO/IEC 42001), we are committed to the responsible development and deployment of these systems and to providing accessible channels for reporting harms they may cause.

If you have observed, experienced, or suspect an adverse impact arising from an LLM-powered feature or system — including biased or discriminatory outputs, inaccurate or misleading AI-generated content, unexplained automated decisions, or other unintended AI behaviors — we want to hear from you.

Who can report: Any interested party may submit an AI-related concern — including customers, end users, partners, researchers, or members of the public. You do not need to be a security researcher, and no technical expertise is required.

How to Report an AI Concern#

Send a description of the observed impact to security@dotcms.com; use "AI Adverse Impact Report" as the subject line. Please include:

A description of the AI feature or behavior involved
The context in which the impact was observed (e.g., content type, workflow, or interface)
Any supporting evidence such as screenshots, output samples, or session details
Whether the impact affected you directly or was observed on behalf of others

Our Commitment for AI Concerns#

Upon receiving an AI-related concern, dotCMS commits to:

Acknowledge receipt within 5 business days;
Route the report to our AI governance team for review;
Communicate findings, corrective actions, or next steps where appropriate;
Log the report as part of our AI incident management process.

dotCMS does not retaliate against individuals who raise AI-related concerns in good faith. All reports are treated with confidentiality.