Security Disclosure

Report security issues privately and responsibly.

XAIAK welcomes responsible reports that help protect Members, Businesses and relationship-private information.

Report an issue

Email security@xaiak.com with the affected XAIAK version, device/Android version, a concise description, reproduction conditions and observed impact. Do not include passwords, access tokens, private Business terms or other users’ personal information unless specifically required for investigation.

Trust model

XAIAK separates public projections from relationship-authorized information, distinguishes authentication from authorization, and preserves Business membership/grant boundaries. The server remains authoritative for protected state and actions.

External providers

Provider connections do not silently become XAIAK truth owners. Provider outages or unknown outcomes should degrade visibly instead of producing fabricated success.

Disclosure

Please avoid publishing exploitable details before there has been a reasonable opportunity to investigate and address the issue.