Security disclosure policy

Vela holds SOC 2, ISO 27001 and ISO 42001 certification and handles personal data in line with the GDPR. To request our reports under NDA, write to security@velaenergy.ai.

Send a report to security@velaenergy.ai. Include affected URLs or components, steps to reproduce, expected and actual behavior, and any relevant proof of concept.

Do not disrupt service, access accounts or data without authorization, use social engineering, or perform testing that could affect other users. If you encounter customer or personal information, stop testing and report the issue without retaining or sharing that information.

This is a responsible-disclosure contact, not a bug bounty program. Vela does not offer rewards, response-time commitments, or safe-harbor terms through this page.