> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ragsuite.de/llms.txt
> Use this file to discover all available pages before exploring further.

# Security policy

> How to report RAGSuite security vulnerabilities — private disclosure to sales@ragsuite.de.

This summary follows the Community Edition [SECURITY.md](https://github.com/ragsuite/RAGSuite/blob/main/SECURITY.md).

## Supported versions

| Version                          | Supported        |
| -------------------------------- | ---------------- |
| `1.0.x` (current Platform / CLI) | Yes              |
| Older pre-`1.0.0` cuts           | Best effort only |

Enterprise Edition source and signed offline keys are **private**. Do not open public issues about private Enterprise internals.

## Reporting a vulnerability

**Do not** file a public GitHub Issue for security vulnerabilities.

Report privately:

* Email: **[sales@ragsuite.de](mailto:sales@ragsuite.de)** (subject like `RAGSuite security report`)
* Or **GitHub Security Advisories** for the public repository when available

Include component, version, reproduction steps, impact, and follow-up availability.

## Safe harbor & disclosure

Good-faith private research with coordinated disclosure is welcomed per the public security policy. Allow time for a fix before public disclosure.

## Non-security contact

Product, sales, and Enterprise licensing: [sales@ragsuite.de](mailto:sales@ragsuite.de) · [www.ragsuite.de](https://www.ragsuite.de)