Responsible Disclosure Policy

Safe Harbor

Global Vibing LLC, which operates Govern All A.I., supports responsible security research. We will not pursue legal action against researchers who discover and report vulnerabilities in good faith, provided they follow this policy.

Scope

In Scope

• governallai.com and all subdomains
• Public APIs served from the above domain
• Govern All A.I. applications

Out of Scope

• Social engineering attacks
• Physical security assessments
• Denial of service attacks
• Automated scanning generating excessive traffic
• Third-party services

Reporting

Report vulnerabilities to [email protected]

Response Timeline

• Acknowledgment: Within 3 business days
• Triage: Within 10 business days
• Resolution: Critical: 7 days, High: 30 days, Medium: 90 days

Recognition

Valid reports earn a listing on our acknowledgments page.