Read the maintained UnifyEMPI security policy.

Report suspected vulnerabilities through GitHub private vulnerability reporting. Do not open a public issue and never include patient data, credentials or cryptographic material.

The policy source is docs-site/src/content/docs/governance/security.md.