UK Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023

Overview

This policy outlines the steps and responsibilities for ensuring compliance with the UK Product Security and Telecommunications Infrastructure (Security Requirements for Relevant Connectable Products) Regulations 2023. This includes ensuring security updates, managing vulnerability reports, and maintaining communication with stakeholders regarding security issues for our products.

1. Minimum Security Update Periods

All products must have clearly defined security update periods to ensure continued protection against vulnerabilities. The minimum security update periods for our products are as follows:

Product: Pure One
Date of First Availability in the UK: May 2023
End of Support Date: December 2027

Product: Pure Touch
Date of First Availability in the UK: October 2019
End of Support Date: December 2026

Product: Pure V1
Date of First Availability in the UK: January 2017
End of Support Date: December 2026

Product: Pure V2
Date of First Availability in the UK: October 2018
End of Support Date: December 2026

Note: For subscription-based products, security updates and support will be provided for as long as the subscription service is offered, or for a maximum of 10 years, whichever comes first.

Product: Halo Go
Date of First Availability in the UK: 2018
End of Support Date: 2028

Product: Halo Drive
Date of First Availability in the UK: 2018
End of Support Date: 2028

Product: Halo Drive 2
Date of First Availability in the UK: 2025
End of Support Date: 2035

Product: Halo Pro
Date of First Availability in the UK: 2018
End of Support Date: 2028

Product: Halo Ultra
Date of First Availability in the UK: 2021
End of Support Date: 2031

Product: Halo View
Date of First Availability in the UK: 2021
End of Support Date: 2031

Product: Halo View 2
Date of First Availability in the UK: 2024
End of Support Date: 2034

Product: Halo View 3
Date of First Availability in the UK: 2025
End of Support Date: 2035

Product: Halo Vision
Date of First Availability in the UK: 2022
End of Support Date: 2032

Product: Halo Vision 2
Date of First Availability in the UK: 2024
End of Support Date: 2034

Product: Halo Vision 3
Date of First Availability in the UK: 2025
End of Support Date: 2035

Product: Halo Play
Date of First Availability in the UK: 2024
End of Support Date: 2034

Product: Halo Play SGL
Date of First Availability in the UK: 2024
End of Support Date: 2034

Product: Halo Ultima
Date of First Availability in the UK: 2024
End of Support Date: 2034

Product: Halo Guard
Date of First Availability in the UK: 2024
End of Support Date: 2034

Product: Halo Guard Taxi
Date of First Availability in the UK: 2024
End of Support Date: 2034

Product: Halo Start
Date of First Availability in the UK: 2021
End of Support Date: 2031

Product: Halo Start 2
Date of First Availability in the UK: 2025
End of Support Date: 2035

Product: Halo Ignite
Date of First Availability in the UK: 2022
End of Support Date: 2032

Product: Halo Ignite 2
Date of First Availability in the UK: 2025
End of Support Date: 2035

Product: Halo Guardian
Date of First Availability in the UK: 2025
End of Support Date: 2035

Product: Halo Spark
Date of First Availability in the UK: 2025
End of Support Date: 2035

Product: Halo Spark Dual
Date of First Availability in the UK: 2025
End of Support Date: 2035

Product: Halo Elite
Date of First Availability in the UK: 2025
End of Support Date: 2035

2. Vulnerability Reporting

To ensure timely identification and resolution of security issues, the following process must be followed:

Submission of Vulnerability Reports:
Vulnerability reports for eligible Road Angel products can be submitted via our secure webform:
👉 https://www.inphaseinternational.com/reportsecurityvulnerability

Acknowledgement of Reports:
An acknowledgement will be sent to the reporter within 3 business days of receiving the report.

Status Updates:
Status updates will be provided to the reporter until the resolution of the issue.

Resolution Timeline:
Reported security issues will be resolved within 30 business days from the date of acknowledgement.

3. Responsibilities

Product Security Team:

  • Ensure updates are developed and released according to defined periods

  • Manage the vulnerability reporting process

  • Maintain records of vulnerabilities and resolutions

Customer Support Team:

  • Communicate security updates and support timelines

  • Assist with vulnerability report submissions

Compliance Team:

  • Monitor compliance with the regulations

  • Conduct regular audits of timelines and processes

4. Communication and Documentation

Security Update Notices:
Regular notices will inform customers of upcoming updates and product end-of-support timelines.

Policy Review:
This policy will be reviewed annually to ensure it remains aligned with regulations and industry standards.

5. Contact Information

For inquiries related to product security and compliance, please contact:
📧 info@roadangelgroup.com