Search for: CareSource About Us Legal Responsible Disclosure Statement RESPONSIBLE DISCLOSURE STATEMENT Above all else, CareSource is committed to the care and improvement of human life. Part of that mission is to protect our members, workforce, systems, and facilities. If you believe you’re aware of a potential security vulnerability, please let us know by emailing our Information Security team directly at Information.Security@caresource.com. We also maintain an ethics line (1-844-784-9583) to receive concerns about a violation of our standards of conduct or policies and procedures. Please review the following prior to submitting: We ask that you work with us to diagnose and correct a vulnerability prior to publically disclosing it to ensure the safety and well-being of our members and systems. We ask that you refrain from including sensitive information in any submission to us, e.g. member identifying information. We ask that you not perform vulnerability or similar testing on products that are actively in use for public safety reasons. We ask that you not take advantage of any vulnerability you have discovered. Notice: In the event you share information with us, you agree that the information you submit will be considered non-proprietary and non-confidential, and that we may use such information in any manner, without restriction. Furthermore, you agree that submitting information does not create any rights for you or any obligation for us. CAREERS TERMS AND CONDITIONS HIPAA PRIVACY PRACTICES © Copyright CareSource 2021. All rights reserved. Last updated 11/28/2021. SYSTEM DETAILS

Search for: CareSource About Us Legal Accessibility and 508 Compliance ACCESSIBILITY AND 508 COMPLIANCE Accessibility for People with Disabilities and Compliance with Section 508 CareSource is committed to meeting or exceeding the requirements of Section 508 of the Rehabilitation Act (29 U.S.C. 794d), as amended in 1998. Section 508 is a federal law that requires agencies to provide people with disabilities equal access to electronic information and data comparable to those who do not have disabilities, unless doing so would impose an undue burden on the agency. The Section 508 standards are the technical requirements and criteria used to determine whether the agency is meeting the requirements of this law. Read more about 508 compliance at Section508.gov. Legal Overview EXECUTIVE LEADERSHIP BOARD OF DIRECTORS ANNUAL STAKEHOLDER REPORTS ACCREDITATIONS CONTACT US NEWSROOM CORPORATE COMPLIANCE LEGAL CARESOURCE FOUNDATION CAREERS CAREERS TERMS AND CONDITIONS HIPAA PRIVACY PRACTICES © Copyright CareSource 2021. All rights reserved. Last updated 11/28/2021. SYSTEM DETAILS