# CINTA — security.txt (RFC 9116)
# Served at https://<your-domain>/.well-known/security.txt
# Reach us about a security issue before disclosing it publicly.

Contact: mailto:security@cinta-ai.com
Expires: 2027-07-01T00:00:00.000Z
Preferred-Languages: en, es
Canonical: https://cinta-ai.com/.well-known/security.txt
Policy: https://cinta-ai.com/legal/security
Acknowledgments: https://cinta-ai.com/legal/security#acknowledgments

# Coordinated disclosure: report privately first, give us reasonable time to
# remediate before disclosure, and avoid privacy violations, data destruction,
# or service degradation while testing. We do not pursue good-faith researchers.
# Full policy (safe harbor, SLA, scope): https://cinta-ai.com/legal/security
#
# Owner gate: confirm monitored inbox + production domain at go-live (F3)