The Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023

1. Vulnerability Disclosure Program

To ensure the security of our instax™ products, we are collecting and disclosing product vulnerability information.

2. Subject of vulnerability reports

All genuine products/software in related to instax™ products will be subject of the report. The exclusion of the Vulnerability Disclosure Program are as follows:

• Products for which support has been discontinued
• Applications for smartphones and PCs
• Other web services provided by our company

3. Where to report vulnerabilities

To report vulnerabilities regarding our products, please send an email to [email protected]

4. FUJIFILM's response after receiving the report

Starting from the date of receipt of a vulnerability report, we will reply to you within one business day, acknowledging receipt of the report. If a vulnerability exists in our product and it is deemed necessary to disclose it, we will publish a security advisory on our website as soon as the information can be disclosed to enable the customer to take appropriate measures, after arranging a date between the parties concerned.

5. Rewards

We do not offer rewards regardless of the content of the report.

6. Relevant instax™ products to which this could apply

Product name	End of production date	End of support date
instax mini Evo Cinema™	To be determined	27/01/2033