# Vedatricks Technologies Private Limited — security contact information (RFC 9116)
# CIN U62012KA2025PTC209058 · Bengaluru, Karnataka, India
# Human-readable policy, scope, rules of engagement and safe harbour:
#   https://www.vedatricks.com/legal/security/
#
# Contact routes to the general company mailbox: no dedicated security@ mailbox exists yet,
# and a published address that bounces is worse than none. Replace the Contact line the day
# security@vedatricks.com is created.
#
# Expires must always be less than 12 months away. Refresh it, and this file, before it passes.
# No PGP key is published yet, so there is no Encryption line; add one when a key exists, and
# do not add a CSAF line until a CSAF feed is actually served.

Contact: mailto:hello@vedatricks.com
Contact: https://www.vedatricks.com/legal/security/
Expires: 2027-06-30T00:00:00.000Z
Preferred-Languages: en, hi
Canonical: https://www.vedatricks.com/.well-known/security.txt
Policy: https://www.vedatricks.com/legal/security/
Acknowledgments: https://www.vedatricks.com/legal/security/#thanks
Hiring: https://www.vedatricks.com/careers/

# In scope: www.vedatricks.com, clinitricks.com, hamarapg.com, biz.vedatricks.com,
# connect.vedatricks.com, mail.vedatricks.com, analytics.vedatricks.com,
# societyhub.vedatricks.com and our public APIs under /api/.
#
# Out of scope: third-party services we use (Razorpay, Cloudflare, Sarvam AI,
# ResellerClub, our hosting provider), denial-of-service and volumetric testing,
# social engineering, and scanner output with no manual verification.
#
# Good-faith research within the published rules of engagement is authorised and
# covered by the safe harbour at https://www.vedatricks.com/legal/security/#safe-harbour
# We acknowledge reports within 3 business days and triage within 10 business days.