# RFC 9116 — security disclosure metadata.
# Discoverable at https://tendara.health/.well-known/security.txt
#
# Update Expires: every 12 months.

Contact: mailto:security@tendara.health
Expires: 2027-05-05T00:00:00.000Z
Preferred-Languages: en
Canonical: https://tendara.health/.well-known/security.txt
Policy: https://tendara.health/trust#disclosure

# We acknowledge security reports within 24 hours, triage within 72 hours,
# and remediate critical-severity issues within 7 days. See
# https://tendara.health/trust for the full incident-response process.