# Recovea security contact + disclosure policy (RFC 9116).
# We run an in-path AI-spend gateway, so we take coordinated disclosure
# seriously. If you have found a vulnerability, tell us before you tell
# the internet and we will work the fix with you.

Contact: mailto:security@recovea.ai
Contact: https://recovea.ai/contact
Policy: https://recovea.ai/trust
Preferred-Languages: en
Canonical: https://recovea.ai/.well-known/security.txt
Expires: 2027-06-30T23:59:59.000Z

# What we store is published and falsifiable: https://recovea.ai/trust
# Fail-open behavior and the failure-mode table: https://recovea.ai/trust#fail-open