Contact: mailto:support@fango.fi
Expires: 2027-09-07T00:00:00.000Z
Preferred-Languages: fi, en
Canonical: https://fango.fi/.well-known/security.txt
Policy: https://fango.fi/terms

# Fango — coordinated vulnerability disclosure
#
# Please report security vulnerabilities in the Fango app (iOS, Android) or in
# fango.fi to the address above, with "security" in the subject line. Include
# what you found, how to reproduce it, and how we can reach you.
#
# We acknowledge reports within 5 working days and will tell you what we
# intend to do. Please give us a reasonable time to fix an issue before
# disclosing it publicly, and do not access, modify or delete other people's
# data while testing.
#
# Under Regulation (EU) 2024/2847 (Cyber Resilience Act), Art. 14, actively
# exploited vulnerabilities and severe security incidents are reported to the
# CSIRT designated as coordinator and to ENISA via the single reporting
# platform, within the deadlines set there.