# Security policy for NotesSecured (Infinitum Solutions, Inc.)
# Full policy: https://notessecured.lovable.app/security

Contact: mailto:security@notessecured.app
Contact: https://notessecured.lovable.app/security#disclosure
Expires: 2027-07-31T00:00:00.000Z
Policy: https://notessecured.lovable.app/security#disclosure
Preferred-Languages: en
Canonical: https://notessecured.lovable.app/.well-known/security.txt

# Encrypted reports
# PGP public key: NotesSecured Security (Infinitum Solutions, Inc.) <security@notessecured.app>
# Fingerprint: C065 1C9A 5DD6 7BB3 F3AC 9DD2 BA41 4161 2058 DE20
# Verify this fingerprint against the one published on
# https://notessecured.lovable.app/security#disclosure before use.
Encryption: https://notessecured.lovable.app/.well-known/pgp-key.txt

# Response targets
# Acknowledgement: within 3 business days
# Triage: within 10 business days
# Status updates: at least every 14 days
# We do not currently run a paid bug bounty programme; we credit reporters on request.