# MED-CLINIC Security Policy
# https://med-clinic.be/.well-known/security.txt
# Last Updated: 2026-01-26

Contact: mailto:security@med-clinic.be
Contact: mailto:info@med-clinic.be
Contact: https://med-clinic.be/contact

Expires: 2027-01-26T23:59:59.000Z

Preferred-Languages: nl, fr, en

Canonical: https://med-clinic.be/.well-known/security.txt

Policy: https://med-clinic.be/security-policy

# Acknowledgments
# We appreciate responsible disclosure of security vulnerabilities.
# Please allow us reasonable time to investigate and address any reported issues.

# Scope
# This security policy covers:
# - med-clinic.be (main website)
# - All subdomains of med-clinic.be
# - MED-CLINIC mobile applications

# Out of Scope
# - Third-party services and integrations
# - Social media accounts
# - Physical security

# Safe Harbor
# We will not pursue legal action against researchers who:
# - Make a good faith effort to avoid privacy violations
# - Do not exploit any vulnerability beyond what is necessary to demonstrate the issue
# - Report vulnerabilities promptly and do not publicly disclose before we've had reasonable time to respond

# Response Time
# We aim to respond to security reports within 48 hours and resolve critical issues within 7 days.

Hiring: https://med-clinic.be/vacatures