# Build Paperless — security contact and vulnerability disclosure
# Cashara Pty Ltd trading as Build Paperless. ABN 92 684 673 836.
# Published under RFC 9116. Full policy: https://www.buildpaperless.com.au/security

Contact: mailto:security@buildpaperless.com.au
Contact: https://www.buildpaperless.com.au/security
Expires: 2027-06-30T23:59:59.000Z
Preferred-Languages: en
Canonical: https://www.buildpaperless.com.au/.well-known/security.txt
Policy: https://www.buildpaperless.com.au/security

# We acknowledge good-faith reports within 24 hours and practise coordinated
# disclosure. We do not run a paid bug bounty; we recognise reporters with
# their consent. Please do not access, modify, or exfiltrate other users'
# data, and give us reasonable time to remediate before any public disclosure.