<?xml version="1.0" encoding="UTF-8"?>
<!--
  Cervito sitemap — audit Phase 1, Finding #8.
  Lists the truly-public surfaces. Dashboard / API / auth / webhook URLs
  are excluded (and disallowed via robots.txt) since they require auth or
  are not meant to be indexed.

  When a marketing landing page replaces the / redirect, update the first
  entry's priority to 1.0 and the others proportionally.
-->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">

  <url>
    <loc>https://cervito.up.railway.app/</loc>
    <lastmod>2026-05-17</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>

  <url>
    <loc>https://cervito.up.railway.app/privacy</loc>
    <lastmod>2026-03-02</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>

  <url>
    <loc>https://cervito.up.railway.app/terms</loc>
    <lastmod>2026-05-17</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.6</priority>
  </url>

  <url>
    <loc>https://cervito.up.railway.app/faq</loc>
    <lastmod>2026-03-02</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>

  <url>
    <loc>https://cervito.up.railway.app/docs/api</loc>
    <lastmod>2026-05-17</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.6</priority>
  </url>

  <url>
    <loc>https://cervito.up.railway.app/docs/legal/dpa-addendum</loc>
    <lastmod>2026-05-17</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>

  <url>
    <loc>https://cervito.up.railway.app/docs/legal/sub-processors</loc>
    <lastmod>2026-05-17</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>

</urlset>
