# Lumaa security disclosure
# RFC 9116 — https://www.rfc-editor.org/rfc/rfc9116

Contact: mailto:security@lumaa.ai
Expires: 2027-05-09T00:00:00.000Z
Preferred-Languages: en
Canonical: https://lumaa.ai/security.txt
Policy: https://lumaa.ai/policies.html#security

# Please give us a reasonable window (90 days) before public disclosure.
# Do not run automated scanners against the production CRM tenant data.
# CTF-style tests against your own tenant only.