diff --git a/SECURITY.adoc b/SECURITY.adoc
new file mode 100644
index 0000000..f321f98
--- /dev/null
+++ b/SECURITY.adoc
@@ -0,0 +1,7 @@
+= Security Policy
+
+Please submit an issue or pull request for any non critical bugs
+or non critical vulnerabilities you find.
+
+In case of a responsible disclosure, please follow instructions
+on https://www.gematik.de/datensicherheit#c1227.