Editorial Policy

Last updated: 1 October 2026

Root Notes is an independent publication written and edited by Prince Baruwala, and operated from India. It is not owned by, funded by or affiliated with any of the companies it covers.

Where the facts come from

Every article is built from primary sources: the vendor's advisory, the researcher's write-up, the regulator's report, the court or company filing, the catalogue entry. Where the only available account is somebody else's reporting, the article says so and names the outlet, so a reader can tell a document from a claim about one.

Figures are taken from the source that produced them, with the source named in the sentence that uses them. Where two sources give different numbers, the article gives both and says they disagree rather than picking the larger one.

Quotation and paraphrase

Quotations are kept short and few. The rest is paraphrased with attribution, because a page of block quotes hides the difference between what a company said and what follows from it. Nothing is quoted out of the context that changes its meaning.

What is not established

Every article ends with a section listing what remains unknown: an attribution that has not been confirmed, a count the sources disagree about, a question the research leaves open, a vendor that has not responded.

This is the part of the method worth stating plainly. Security reporting is written while the facts are still moving, and a piece that lists only what is known reads as more settled than it is. Saying what is missing is how a reader judges the rest.

Corrections

If something here is wrong, write to hello@rootnotes.in or use the contact page. Corrections are welcome from anyone, including the companies and researchers an article is about.

• A factual error is fixed as soon as it is confirmed, and the article's modified date changes with it.
• Where a correction changes what the piece means — a wrong attribution, a wrong number, a conclusion that no longer follows — the change is noted on the article itself rather than made silently.
• A typographical fix that does not change the meaning is made without a note.
• Articles are not removed to settle a dispute. Where something cannot be stood up, it is corrected in public.

Independence and money

Root Notes runs no advertising network and no retargeting scripts, as set out in the cookie policy. Any sponsored or paid placement, if one is ever accepted through the advertise page, will be labelled as such on the piece itself and will not be written as editorial coverage.

No company covered here has any say over what is published, before or after the fact.

Privacy and data

What the site collects about readers, and how to turn it off, is in the privacy policy and the cookie policy.