Security Policy

We take security and privacy seriously. If you discover a vulnerability or something that could impact users, please report it responsibly.

How to report

• Email: security reports to durhamaisi@durham.ac.uk with subject: [SECURITY]
• Do not open a public issue for security reports.
• Include steps to reproduce, affected pages, and any logs where possible.

Response

• We’ll acknowledge receipt within 3 business days.
• We’ll investigate and aim to resolve promptly.
• Once fixed, we’ll credit reporters if desired.