# Ordence — how to report a security problem.
# Format: RFC 9116. Served by app/security.txt/route.ts.

Contact: mailto:security@ordence.com
Expires: 2027-04-09T22:41:04.209Z
Preferred-Languages: en
Canonical: https://ordence.com/security.txt
Policy: https://ordence.com/trust

# We do not run a paid bug bounty and we do not want you to discover
# that after doing the work. What we do offer: a human reply, an
# honest timeline, and credit if you want it.
#
# Please do not test against a live customer workspace, and please do
# not access data that is not yours in order to demonstrate that you
# could. A clear description is enough; we will reproduce it.