# Simple Smooth Safe — security contact
#
# RFC 9116. If you have found a vulnerability in this website or in one of our
# products, this is how to reach us.
#
# We build software that runs inside our customers' Microsoft tenants, so a
# report about SSS DocGen, SSS DMS or PSA Hub matters more to us than one about
# this marketing site. Both are welcome.

Contact: mailto:security@simplesmoothsafe.com
Contact: mailto:info@simplesmoothsafe.com
Expires: 2027-08-10T00:00:00.000Z
Preferred-Languages: en, pt
Canonical: https://simplesmoothsafe.com/.well-known/security.txt
Policy: https://simplesmoothsafe.com/legal/

# What to expect
#
# We are a small company and answer reports ourselves rather than routing them
# through a queue. We aim to acknowledge within two business days, tell you
# whether we can reproduce it within five, and agree a disclosure timeline with
# you rather than imposing one.
#
# We do not run a paid bug bounty. We will credit you by name if you want that,
# and we will not threaten a researcher who reports something in good faith.
#
# Please do not test against a customer environment. If you need somewhere to
# test, ask us and we will arrange it.