We're working on this..
Note: we do not offer monetary rewards for vulnerability disclosures
...
Promise: (In development)
Scope: (In development)
The current scope of vulnerability disclosure is limited to the domain "Concordia.ab.ca and subdomains"
...
"
"Safe Harbor": (In development) Assures that reporters of good faith will not be unduly penalized.
Process: (borrowed from https://www.cpacanada.ca/en/vulnerability-disclosure-policy while we develop our own policy)
...