Skip to content

Security: volta-npo/impact-proof-kit

Security

SECURITY.md

Security Policy: Impact Proof Kit

Data handled

This local-first product may contain student and chapter data. Data stays in the browser unless a user exports it.

Product-specific risks

  • Do not enter raw passwords, API keys, bank credentials, private keys, or regulated sensitive data.
  • Treat exported JSON/CSV/Markdown as client records and store them in approved Volta project folders.
  • Verify evidence before using any generated packet for owners, sponsors, funders, or public reporting.
  • For this product's domain, review these gates before handoff: Baseline and follow-up required, Source attached for every claim, Privacy review before sponsor export.

Reporting

Report vulnerabilities privately to Volta maintainers before public disclosure.

There aren't any published security advisories