Cal. Elec. Code § 19290

If a remote accessible vote by mail system has been certified or conditionally approved by the Secretary of State, the vendor or, in cases where the system is publicly owned, the jurisdiction shall notify the Secretary of State and all local elections officials who use the system in writing of any defect, fault, or failure of the hardware, software, or firmware of any system or part of any system created or manufactured by the vendor, or supplied by the vendor to any jurisdiction, within 30 calendar days after the vendor or jurisdiction learns of the defect, fault, or failure.