# KANDIMA Security Policy
# Conforms to RFC 9116

Contact: mailto:security@kandima.ai
Contact: https://kandima.ai/contact
Expires: 2027-09-18T15:25:37.540Z
Preferred-Languages: es, en
Canonical: https://kandima.ai/.well-known/security.txt
Policy: https://kandima.ai/security

# Scope: kandima.ai, *.kandima.ai, kandima-saas.vercel.app
# Out of scope: 3rd party services (Supabase, Stripe, Clerk, Resend, Vercel)
# Hall-of-fame opt-in: include your handle in the report to be credited at /security