Security contact

# Security contact — SupplierClear / Bacenik

| Channel | Address | Use |
|---------|---------|-----|
| Security | security@bacenik.com | Vulnerability reports, IR coordination |
| Privacy | privacy@bacenik.com | DSAR / DPO inquiries |
| General | info@bacenik.com | Procurement / pilot requests |

## Preferred encryption

If sending sensitive vulnerability details, request a secure channel in your initial email. PGP key publication is optional and may be provided on request.

## Response targets

- Vulnerability acknowledgment: 10 business days
- Privacy DSAR: per privacy policy / applicable law
- Production incidents: handled through SupplierClear's internal incident-management process

## Public information

Vulnerability disclosure policy: `/compliance/vulnerability-disclosure`