# Emcognito — security contact
#
# This file exists because /.well-known/security.txt previously resolved to the
# SPA's index.html with HTTP 200 (CloudFront serves the app shell for unknown
# paths). Scanners treat a 200 as a valid policy file, so the absence of a
# policy read as a malformed one.
#
# The contact below is verified to accept mail at SMTP. Do not point it at any
# address under the bare @emcognito.com domain: mx1's recipient policy forwards
# UUID aliases and discards everything else, so those addresses accept mail and
# then delete it without a bounce.

Contact: mailto:hello@wm.emcognito.com
Expires: 2027-07-29T00:00:00.000Z
Preferred-Languages: en
Canonical: https://emcognito.com/.well-known/security.txt
Policy: https://emcognito.com/terms