Privacy

This site has no cookies, analytics or tracking. The only input it takes is the contact form.

Our hosting provider, Netlify, processes standard request data such as IP addresses to deliver the site and protect it from abuse. If you choose light or dark mode, that choice is stored in your own browser and nowhere else.

If you use the contact form or email us, your message is delivered to us by email and is not stored on this site. We use it only to reply and don't add you to any list. Soulbound Security Ltd is the controller for that correspondence. You can ask us about, correct or delete anything we hold by writing to legal@soulboundsecurity.io, and you can complain to the Information Commissioner's Office.

Security disclosures

• Report vulnerabilities to security@soulboundsecurity.io. The same address is published at /.well-known/security.txt.
• In scope: our published products, their reference deployments, and any property their specifications claim.
• Out of scope by design: what a specification itself rules out, for example a compromised signer endpoint during an active window in Soulbound Auth.
• Accepted disclosures, and the changes shipped in response, are credited in the public audits logs.