Contact
One address, read by a person. There is no ticket queue, no chatbot in front of it, and no sales team to route you through.
support@theartofservice.comA question about the data
Whether a mapping is right, why a control is scored the way it is, or what a crosswalk covers. Say which frameworks and which control, and the answer can be checked against the graph rather than asserted.
Read by a person, not a queue. No published response time, because there is nobody rostered to guarantee one.
A security vulnerability
Report anything you find to the same address. There is no paid bug bounty, and the security page says so rather than implying one exists.
Acknowledged within two business days.
A security questionnaire or diligence pack
Send it as it is. The published position on all 93 ISO 27001 Annex A controls, including the ones not met, is on the security page and answers much of it before you ask.
Returned within 30 days, as committed in the DPA.
Billing, refunds or an invoice
Subscriptions are managed from your account settings, including cancellation. For anything the portal will not do, email the same address with the order or subscription reference.
Read by a person, not a queue. No published response time, because there is nobody rostered to guarantee one.
Before you write
Three pages answer most of what arrives in that inbox, and all three are public.
The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001.