# Prolytiq Security Policy — RFC 9116
# https://www.rfc-editor.org/rfc/rfc9116.html

Contact: mailto:contact@prolytiq.ai
Expires: 2027-05-14T23:59:59.000Z
Preferred-Languages: pt, en
Canonical: https://prolytiq.com/.well-known/security.txt
Policy: https://prolytiq.com/legal/security-policy

# If you have found a security vulnerability in Prolytiq, please report it
# to the email above. We commit to:
#   - Acknowledge receipt within 48 business hours.
#   - Provide an initial assessment within 5 business days.
#   - Coordinate disclosure timeline with you in good faith.
#   - Credit you in our security advisories (with your consent).
#
# Please do not exploit the vulnerability beyond what is necessary to
# demonstrate it. Do not access user data beyond your own account.
#
# Scope: prolytiq.com, prolytiq.ai, *.prolytiq.com, *.prolytiq.ai
# Out of scope: third-party integrations (Supabase, Vercel, Stripe,
# Anthropic, Cloudflare, Google, Resend) — please report those to the
# respective vendors. See https://prolytiq.com/legal/subprocessors