Yes. Edverise offers a safe-harbour approach for researchers who report in good faith, give reasonable time to fix issues, avoid privacy violations and disruption, access only the minimum data needed, and avoid social engineering or attacks on staff.