# ==============================================================================
# Clarivius (https://clarivius.com/) — Vulnerability Disclosure Policy (RFC 9116)
# Global Clinical Consultation Platform & Specialist Precedent Network
# EU Data Residency (Frankfurt / Prague) · GDPR Art. 6 & Art. 9 Isolation
# ==============================================================================

# 1. Security Contacts
Contact: mailto:security@clarivius.com
Contact: mailto:dpo@clarivius.com

# 2. Expiration Date (RFC 3339 format, 1 year validity)
Expires: 2027-10-28T00:00:00.000Z

# 3. Canonical URI
Canonical: https://clarivius.com/.well-known/security.txt

# 4. Preferred Communication Languages
Preferred-Languages: en, cs, de

# 5. Responsible Disclosure Policy
# Clarivius values the security research community. If you discover a potential
# vulnerability in our web infrastructure or dual-track data separation architecture,
# please report it responsibly to security@clarivius.com. We acknowledge receipt
# within 48 hours and request that researchers act in good faith without accessing,
# modifying, or exfiltrating patient or clinical case data.
Policy: https://clarivius.com/.well-known/security.txt

# 6. Careers
Hiring: https://clarivius.com/#about