Vulnerability disclosure policy.

If you believe you have found a security vulnerability in AIMIS or this website, report it to security@[DOMAIN]. Include enough detail to reproduce the issue. We acknowledge reports within [CONFIRM] business days and keep you informed as we work on a fix.

Good faith research conducted under this policy is authorized. Do not access, modify or delete data that is not yours, do not degrade the service, and give us reasonable time to address an issue before disclosing it publicly. There is no bounty program today.

Draft for review. Contacts and timelines are placeholders until confirmed.