Vulnerability Disclosure

Nami ML Inc. ("Nami," "we," "our," or "us" in this document) operates the Nami platform and SDKs, and publishes mobile applications (collectively, the "Services"). Anyone can report a vulnerability or security concern with the Services by contacting security@nami.ml and including a proof of concept, a list of tools used (including versions), and the output of the tools. We take all disclosures seriously and will work to verify each reported vulnerability before taking the necessary steps to fix it.

Out of Scope

Our vulnerability disclosure program does not give you permission for:

• Denial of service attacks
• Brute forcing attacks
• Spam or phishing attacks

against Nami services or employees.

Code of Conduct

Do not exfiltrate Nami customer or employee data under any circumstance. Please contact us immediately if you think this is possible or you have done so inadvertently.