# High Intent Digital / AIMS Charter — Security Contact
# https://www.rfc-editor.org/rfc/rfc9116
#
# Report a security vulnerability, please. We take security seriously and
# will respond within 3 business days.

Contact: mailto:security@highintentdigital.com
Contact: mailto:team@highintentdigital.com
Expires: 2027-07-31T23:59:59.000Z
Preferred-Languages: en
Canonical: https://highintentdigital.com/.well-known/security.txt
Policy: https://highintentdigital.com/aimscharter/legal/security-policy.html

# Guidance for researchers:
# - No automated scanning or DoS-style testing. If you need to reproduce
#   an issue programmatically, contact us first for a scoped window.
# - Give us reasonable time to remediate before public disclosure.
#   90 days is a good default; sooner if the issue is being actively
#   exploited, longer if the fix requires coordinated remediation.
# - Do not access or modify data that is not your own.
# - Do not test third-party services (Netlify, Stripe, SharpSpring,
#   Google) that we depend on. Report those to the respective vendors.
#
# We do not currently run a paid bug bounty. We do publicly credit
# researchers who report valid issues, on request.