# DanubeData Security Disclosure Policy
# RFC 9116 — https://www.rfc-editor.org/rfc/rfc9116

Contact: mailto:security@danubedata.ro
Contact: https://danubedata.ro/contact
Expires: 2027-04-26T00:00:00.000Z
Preferred-Languages: en, ro
Canonical: https://danubedata.ro/.well-known/security.txt
Policy: https://danubedata.ro/security-program
Acknowledgments: https://danubedata.ro/security-program#acknowledgments

# We welcome reports of vulnerabilities affecting DanubeData services.
# Please report responsibly: do not access customer data, do not perform
# DoS testing, and give us a reasonable window to remediate before
# public disclosure. Initial response within 24 hours, target remediation
# windows: critical 24h, high 7d, medium 30d, low next release.