# YearWise security contact (RFC 9116).
#
# A researcher who finds something today has no documented way to tell us, and
# the absence of a channel is not the absence of findings — it is the absence
# of the ones that would have been reported.

Contact: mailto:security@taxmint.ai
Preferred-Languages: en
Canonical: https://yearwise.ai/.well-known/security.txt
Canonical: https://taxmint.ai/.well-known/security.txt
Policy: https://taxmint.ai/security

# We are a small team handling taxpayer data. We will acknowledge a report
# within three business days. We do not currently run a paid bounty; we will
# credit you if you would like that, and we will not pursue action against
# good-faith research that stays within your own account's data.
Expires: 2027-09-07T00:00:00.000Z