Security Policy

We disclose our system and data protection policy, responsibility boundaries, and basic incident response policy.

Scope

mintor.dev ドメイン配下のWeb/APIおよび公式アプリケーション(including dependent third-party services).

Least privilege / zero-trust principles, data protection via RLS and similar controls.
Vulnerability management (regular assessments / priority-based remediation).
Incident response: early detection, containment, recovery, and prevention of recurrence.

SLO: acknowledgement within 3 business days, initial triage within 7 business days.