# Transpose Skills — security contact information (RFC 9116)
#
# Full vulnerability disclosure policy: the Policy: URL below, served from
# apps/web/app/(legal)/security/disclosure-policy (source of the same text:
# docs/trust/TS-PLT-SEC-009). The Policy: path is load-bearing — moving that
# route breaks RFC 9116 discovery and must be changed in both places.
#
# Keep Expires no more than 12 months out. An expired security.txt is treated
# as invalid by scanners and reads worse than none at all.

Contact: mailto:security@transposeskills.com
Expires: 2027-09-22T00:00:00.000Z
Preferred-Languages: en
Canonical: https://www.transposeskills.com/.well-known/security.txt
Policy: https://www.transposeskills.com/security/disclosure-policy

# We hold student evidence and assessment records on behalf of Australian
# education and training providers. If you find a way to reach data you should
# not reach, please stop, retain nothing, and tell us. Good-faith research under
# our published policy is authorised and will not be met with legal action.