# Epafi — security contact and disclosure policy
# https://epafi.app/.well-known/security.txt

Contact: mailto:security@epafi.app
Contact: https://epafi.app/security
Expires: 2027-08-27T00:00:00.000Z
Preferred-Languages: en, el
Canonical: https://epafi.app/.well-known/security.txt
Policy: https://epafi.app/security#disclosure

# Scope: epafi.app and api.epafi.app
# Out of scope: third-party services we do not operate — report those to their
# own providers. The current list is at https://epafi.app/subprocessors
#
# We do not pursue legal action against good-faith researchers who follow the
# policy above. Please do not access other customers' data, degrade the service,
# or spam endpoints while testing.
#
# There is no paid bounty programme. We will credit you if you want credit.