# cloak.business Security Policy (RFC 9116)
# https://cloak.business/.well-known/security.txt

Contact: mailto:security@cloak.business
Expires: 2027-02-23T00:00:00.000Z
Preferred-Languages: en, de
Canonical: https://cloak.business/.well-known/security.txt
Policy: https://cloak.business/security-compliance
Acknowledgments: https://cloak.business/security-compliance#acknowledgments

# Security Measures
# - TLS 1.3 only
# - HSTS with preload
# - Security headers (X-Frame-Options, CSP, etc.)
# - ISO 27001:2022 certified infrastructure (Hetzner Nuremberg)
# - Regular security audits and penetration testing
# - Zero-knowledge encryption architecture