Security

Reporting a security problem

If you find a security problem in nevamis.ca or app.nevamis.ca, please tell us privately before you tell anyone else. This is the policy that /.well-known/security.txt points to.

How to report it

Email Sales@nevamis.ca with “Security” in the subject line. Tell us what you found, the page or address involved, and the steps that show it. A screenshot or a short recording helps.

We read every report and reply as soon as we can, usually within a few business days.

Please do not

Send messages, calls, bookings or form submissions that reach real customers or prospects, or that create records in our systems, beyond the minimum needed to show the problem.

Run automated scanners, load tests or anything else that degrades the service.

Access, keep or share data that is not yours.

What is in scope

In scope: nevamis.ca, www.nevamis.ca, app.nevamis.ca, and the source code of this website.

Out of scope: the third-party services we use, such as Cal.com, ElevenLabs, Twilio, Stripe, GitHub and Vercel. Please report a problem in one of those to the provider.

Book a 15-min call