# Security Policy for IMMER Vent
# Application powered by the NextAirQ Platform
# Operated by Solution Tech S.r.l.
# https://securitytxt.org/ — RFC 9116

Contact: mailto:security@nextairq.com
Encryption: https://nextairq.com/pgp-key.txt
Expires: 2027-09-07T23:59:59.000Z
Preferred-Languages: en
Canonical: https://immer-vent.solutiontech.tech/.well-known/security.txt
Policy: https://nextairq.com/security-policy/

# --- How to Report a Security Incident ---
#
# If you have discovered a security vulnerability or are aware of a
# cyber security incident affecting the IMMER Vent app, the
# NextAirQ platform, or any of its connected infrastructure, please
# report it responsibly by following the instructions below.
#
# 1. Send an email to: security@nextairq.com
#
# 2. Include the following information:
#    - The email subject should start with:
#      "Vulnerability report: <brief description>"
#    - A clear description of the vulnerability or incident
#    - Steps to reproduce the issue (if applicable)
#    - The affected application, API endpoint, or system component
#    - Your contact information for follow-up
#
# 3. If the report contains sensitive information, please encrypt
#    your email using our PGP key.
#
# 4. Do NOT publicly disclose the vulnerability before we have had
#    a reasonable opportunity to investigate and address it.
#
# We are committed to acknowledging receipt of your report within
# 3 business days and providing an initial assessment within 10
# business days.
#
# We appreciate the efforts of security researchers and the
# community in helping us keep our platform and users safe.
#
# The NextAirQ Platform and the company operating it, Solution
# Tech S.r.l., does not pursue legal action against individuals
# who report vulnerabilities in good faith and in compliance with
# this policy.