Fix it first if you can
Most enforcement is about something specific — a phishing page, a compromised
record, an unpaid invoice. Putting it right and telling us is usually quicker than
arguing about whether we should have acted.
Fourteen days
Counted from the decision, not from when you noticed it. If you are close to the
limit, send what you have — we would rather have an incomplete appeal in time than a
complete one too late.