Protecting trust by design.

Website controls

The website uses authenticated administration and server-side processing for public forms.

• Public forms submit information to server-side storage.
• Administration requires authentication. Access to submissions and uploaded resumes and cover letters is restricted to authorized administrators.
• The public website uses HTTPS. Form submissions include automated abuse checks.
• Uploaded volunteer resumes and cover letters are excluded from the public asset route.

What we will never ask for here

RenoMe will not ask you through a public website form for passwords, one-time security codes, full payment-card numbers, banking credentials, or copies of identity or immigration documents.

Report a concern

If you believe you found a security weakness or received a suspicious message claiming to be from RenoMe, email connect@renome.io with “Security” in the subject. Include the affected page, what you observed, and how we can contact you.

Do not access other people’s data, disrupt services, use automated high-volume testing, or publicly disclose a suspected vulnerability before we have had a reasonable opportunity to investigate.

Response

We will acknowledge credible reports, assess severity, contain and correct confirmed issues, preserve appropriate records, and notify affected people or authorities when required. We cannot promise a reward, but we appreciate responsible reports made in good faith.

Reference guidance: Canadian Centre for Cyber Security baseline controls.