Legal

Security Policy

Security practices and expectations for Bharat Ledger.

Placeholder policy for lumioLedger. Last updated August 7, 2026. Replace with counsel-reviewed language before production use.

Controls

Password hashing, session revocation, RBAC, CSRF, rate limiting, and audit logging.

Self-hosting

Operators must secure hosts, secrets, TLS termination, and backups.

Reporting

See Responsible Disclosure for how to report vulnerabilities.