Security Policy

Source of truth

Use the official framework repository and release artifacts/packages published by the CourseCode maintainers. Confirm links point to the official GitHub organization and repository.

Reporting vulnerabilities

For responsible disclosure, email: security@coursecodedesktop.com or open a private security advisory in the framework repository.

Cloud boundary

Cloud account terms and data processing apply only when using CourseCode Cloud on its own domain. Framework local/self-managed workflows remain separate.

Framework repo: https://github.com/course-code-framework/coursecode-framework