# Astraea Legal Tech — Security Disclosure Policy
# https://securitytxt.org

Contact: mailto:security@astraealegaltech.ca
Expires: 2026-12-31T23:59:59.000Z
Encryption: https://astraealegaltech.ca/.well-known/pgp-key.txt
Acknowledgments: https://astraealegaltech.ca/security/hall-of-fame
Preferred-Languages: en, fr
Canonical: https://astraealegaltech.ca/.well-known/security.txt
Policy: https://astraealegaltech.ca/security-policy

# Scope
# In-scope: astraealegaltech.ca and all subdomains
# Out-of-scope: Third-party services (Firebase, Supabase, ElevenLabs, Google)

# We follow responsible disclosure. Please allow 90 days for remediation
# before public disclosure. We do not pursue legal action against good-faith
# security researchers who follow this policy.