Legal · Security
Security Policy
Our commitments on platform security and how to report a vulnerability.
Architecture
Proving runs at the edge inside customer infrastructure. Solva systems handle commitments and proofs, never raw customer data, which limits the impact of any single compromise.
Auditing
Proving circuits and the Stellar verifier contract are independently audited, and verification logic is reproducible and open to inspection.
Responsible disclosure
We run a coordinated disclosure program. Report suspected vulnerabilities to security@solva.example; please do not publicly disclose before we have responded.
Incident response
Confirmed incidents are investigated promptly and disclosed on our public status page, along with the remediation taken.
This page is a plain-language template for demonstration. Questions about this policy can go to legal@solva.example.