Please email manuel.rueda@cnag.eu with the subject COHORTome security. Do not report vulnerabilities in public issues or discussions.

Include the version or commit, operating system, whether you use Desktop or Web, and steps to reproduce with synthetic data. Do not send patient data, passwords, API keys, session cookies, or unredacted logs. We can agree on a private way to exchange further details if needed.

COHORTome is pre-release research software. Fixes target the current development branch; historical commits and experimental CI bundles are not supported release lines. There is no guaranteed response time or long-term support commitment.

This policy describes how to report problems. It is not a security certification or approval to process restricted data in a particular deployment.