Skip to content

Security: volta-npo/nonprofit-docu-pack

Security

SECURITY.md

Security Policy: Nonprofit DocuPack

Data handled

This local-first product may contain financial and grant data. Data stays in the browser unless a user exports it.

Product-specific risks

  • Do not enter raw passwords, API keys, bank credentials, private keys, or regulated sensitive data.
  • Treat exported JSON/CSV/Markdown as client records and store them in approved Volta project folders.
  • Verify evidence before using any generated packet for owners, sponsors, funders, or public reporting.
  • For this product's domain, review these gates before handoff: Expired docs flagged, Required docs block completeness, Confidential docs show warning.

Reporting

Report vulnerabilities privately to Volta maintainers before public disclosure.

There aren't any published security advisories