Draft — pending legal review. This policy describes how NXT CLOUD actually works, but it has not yet been reviewed by a lawyer. Items in [brackets] still need to be completed.
Security Policy and Responsible Disclosure
How to report vulnerabilities and what we commit to.
Disclosure
Report vulnerabilities privately through /support (choose “Report a security vulnerability”). Test only against your own accounts; don’t access others’ data, degrade service or use social engineering. We will acknowledge reports, keep you informed and not pursue legal action for good-faith research within these rules. See /security for our current controls.