DocEasy is engineered from first principles around data minimization, client-side isolation, and verifiable zero telemetry. We take security and privacy reports very seriously.

If you discover a potential security vulnerability, security flaw, or data privacy violation in DocEasy, please report it privately.

DO NOT create a public GitHub issue.

Please email the maintainers directly at: [email protected]

Please include in your report:

1. Type of issue (e.g. unexpected network transmission, client-side memory leak, RLS bypass, CSP flaw).
2. Step-by-step instructions to reproduce the issue.
3. Proof-of-concept payload or network capture, if available.
4. The impact of the vulnerability.

• Initial Response: Within 48 hours of receipt.
• Triage & Status Update: Within 5 business days.
• Resolution & Release: We will coordinate a patched release and acknowledge your responsible disclosure.