# EVIDENT — reporting a security issue
#
# Written for a person and for a scanner. What a reporter can expect, and what
# we deliberately do not promise, is on https://evidentapp.ai/trust/.

Contact: mailto:info@ximplicity.es
Expires: 2027-09-14T16:16:43.232Z
Preferred-Languages: en, es
Canonical: https://evidentapp.ai/.well-known/security.txt
Policy: https://evidentapp.ai/trust/

# What to expect
#
# Acknowledgement within 2 business days. Initial triage within 5. While an
# issue is open and confirmed, an update at least every 10.
#
# We do not publish a remediation deadline. Committing to a fix window for a
# defect nobody has seen is a promise made in advance of the facts.
#
# Please give us a reasonable opportunity to fix an issue before describing it
# publicly. We will not pursue somebody who reports in good faith, does not
# access or modify other people's data, and does not degrade the service.