Security Disclosure

Report security issues privately and responsibly.

XAIPT welcomes responsible reports that help improve the product without exposing users to avoidable risk.

Report an issue

Email security@xaipt.com with the affected XAIPT version, device/Android version, a concise description, reproduction conditions and the observed impact. Do not include secrets, private Recovery material or other users' personal data.

Product trust model

XAIPT separates Access, Recovery, Vault and other authority domains. Evidence is intended to be privacy-minimized. Security claims remain bounded by the qualified release and do not imply protection against root/kernel compromise or external providers that do not participate in XAIPT.

Disclosure

Please avoid publishing exploitable details before there has been a reasonable opportunity to investigate and address the issue.