# CardVault security contact -- RFC 9116
# Policy: Library/Compliance/SSF/SECURITY_DISCLOSURE_AND_NOTIFICATION.md

Contact: mailto:security@cardvault.com
Expires: 2027-08-08T00:00:00.000Z
Preferred-Languages: en
Canonical: https://cardvault.com/.well-known/security.txt

# We acknowledge within 2 business days and assess within 5.
# Good-faith research within our policy is welcome. There is no bug bounty.
# Please do not access data belonging to anyone other than yourself.