# How to tell us about a security problem in Kari Flow (formerly PatientMail, and before that ObexComms).
# https://www.rfc-editor.org/rfc/rfc9116

Contact: mailto:security@patientmail.co.uk
Contact: mailto:privacy@patientmail.co.uk
Preferred-Languages: en
# Canonical is the URL this file is SERVED from (RFC 9116 §2.5.2), which today is
# the Vercel hostname; change it and Policy together when the custom domain lands.
Canonical: https://obex-comms.vercel.app/.well-known/security.txt

# This service processes UK dental patients' health data on behalf of dental
# practices. If you have found something, we would rather hear it from you
# than from a patient. Tell us what you found and how you found it; you do
# not need permission to report, and we will not pursue anyone who reports
# in good faith and does not access, alter or retain other people's data.
#
# Please do NOT test against real patient records, send messages to real
# patients, or run automated scanning that could interfere with appointment
# reminders. Ask us and we will arrange something you can safely test.
Policy: https://obex-comms.vercel.app/privacy

# Set this to a real date before go-live, roughly a year out, and renew it.
Expires: 2027-09-03T00:00:00.000Z