Security

Report a vulnerability

Email [email protected] with the subject "Nimbae: Security report". Include the affected page or feature, steps to reproduce with test data, and the impact you observed.

Do not include live passwords, tokens, or another person's documents. If sensitive evidence is necessary, ask us how to share it before sending it. Use your own account, avoid disruptive testing, and stop if you encounter another user's information.

Account and workspace access

Nimbae signs you in itself, keeps sessions in its database, and checks account access on the API. Provider keys stay on the server. Documents may be cached in your browser while you work, so sign out on shared devices and protect downloaded backups.

If you suspect account access, reset your password where applicable and contact support. Never share a sign-in link or verification code.

Documents and AI

AI features send relevant content to the configured model providers. PDF export processes your document on the server; Word and Markdown exports are generated in the browser. Read the privacy policy before adding information that needs special handling.

Availability issues

For failures such as an export that does not finish or a workspace that will not load, check service status and Help. Send ordinary product issues to support using the Contact page.