# RFC 9116 — security disclosure metadata.
# Discoverable at https://vantlyhealth.com/.well-known/security.txt
#
# Update Expires: every 12 months.

Contact: mailto:security@vantlyhealth.com
Expires: 2027-05-05T00:00:00.000Z
Preferred-Languages: en
Canonical: https://vantlyhealth.com/.well-known/security.txt
Policy: https://vantlyhealth.com/trust#disclosure

# We acknowledge security reports within 24 hours, triage within 72 hours,
# and remediate critical-severity issues within 7 days. See
# https://vantlyhealth.com/trust for the full incident-response process.