diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 000000000..080ce35b4
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,28 @@
+# Security Policy
+
+## Supported Versions
+
+Security fixes are applied to the latest released version of LitData. We recommend always using the most recent release.
+
+## Reporting a Vulnerability
+
+**Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.**
+
+Instead, report them privately by emailing [support@lightning.ai](mailto:support@lightning.ai) with the subject line `[Security] LitData: <short description>`. The report will be routed to the maintainers.
+
+Please include as much of the following as you can:
+
+- A description of the vulnerability and its potential impact
+- The affected LitData version(s) and environment (OS, Python version, storage backend)
+- Step-by-step instructions to reproduce the issue
+- A proof of concept or exploit code, if available
+- Any suggested mitigation or fix
+
+## What to Expect
+
+- We will acknowledge receipt of your report as soon as possible.
+- We will investigate, keep you informed of our progress, and may ask for additional information.
+- Once the issue is confirmed, we will work on a fix and coordinate a release.
+- We ask that you do not publicly disclose the issue until a fix has been released. We are happy to credit you in the release notes unless you prefer to remain anonymous.
+
+Thank you for helping keep LitData and its users safe.