diff --git a/README.md b/README.md
index 6e29c84..2800f00 100644
--- a/README.md
+++ b/README.md
@@ -209,10 +209,8 @@ PHP checks and optional E2E checks are described in [docs/release-process.md](do
## License
- App code: AGPL-3.0-or-later (full text: [LICENSES/AGPL-3.0.txt](LICENSES/AGPL-3.0.txt))
-- Etherpad logo assets in `img/etherpad-icon-*.svg`: Apache-2.0 (see [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md))
+- Etherpad logo assets in `img/etherpad-icon-*.svg`: Apache-2.0 (full text: [LICENSES/Apache-2.0.txt](LICENSES/Apache-2.0.txt))
## Acknowledgements
- Thanks to the Ownpad project for the groundwork, ideas, and lessons learned that inspired and shaped this plugin.
-- Thanks to the Nextcloud and Etherpad communities for the underlying platforms and documentation.
-- This project is not affiliated with, endorsed by, or operated by the Ownpad, Nextcloud, or Etherpad projects.
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..ab0f064
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,12 @@
+# Security Policy
+
+SPDX-License-Identifier: AGPL-3.0-or-later
+
+## Reporting a Vulnerability
+
+Please report security issues privately rather than opening a public issue:
+
+- Email contact@etherpad.org, or
+- Use GitHub's private vulnerability reporting (the **Report a vulnerability** button on the repository's **Security** tab).
+
+We'll acknowledge your report and keep you posted on the fix.
diff --git a/THIRD_PARTY_NOTICES.md b/THIRD_PARTY_NOTICES.md
deleted file mode 100644
index f9c1a0f..0000000
--- a/THIRD_PARTY_NOTICES.md
+++ /dev/null
@@ -1,22 +0,0 @@
-# Third-Party Notices
-
-This project includes third-party assets.
-
-## Etherpad Logo Assets
-
-The logo files used by this plugin are based on Etherpad branding assets:
-
-- `img/etherpad-icon-black.svg`
-- `img/etherpad-icon-color.svg`
-- `img/etherpad-icon-white.svg`
-- `img/filetypes/etherpad-nextcloud-pad.svg`
-
-- Upstream project: Etherpad
-- Upstream repository: https://github.com/ether/etherpad-lite
-- License: Apache License 2.0
-
-The full Apache License 2.0 text is provided in:
-
-- `LICENSES/Apache-2.0.txt`
-
-This project is an independent integration and is not an official Etherpad product.
diff --git a/appinfo/info.xml b/appinfo/info.xml
index 717b9da..4e0cc46 100644
--- a/appinfo/info.xml
+++ b/appinfo/info.xml
@@ -11,9 +11,9 @@
John McLear
EtherpadNextcloud
office
- https://github.com/Jaggob/etherpad-integration-for-nextcloud
- https://github.com/Jaggob/etherpad-integration-for-nextcloud/issues
- https://github.com/Jaggob/etherpad-integration-for-nextcloud.git
+ https://github.com/ether/etherpad-integration-for-nextcloud
+ https://github.com/ether/etherpad-integration-for-nextcloud/issues
+ https://github.com/ether/etherpad-integration-for-nextcloud.git
diff --git a/img/README.md b/img/README.md
index 7192453..9d47f21 100644
--- a/img/README.md
+++ b/img/README.md
@@ -16,7 +16,6 @@ This folder contains icon assets used by the app UI and filetype integration.
- Source: Etherpad branding assets
- License: Apache License 2.0
- License text: `../LICENSES/Apache-2.0.txt`
- - Attribution: `../THIRD_PARTY_NOTICES.md`
- `pad-debug.svg`
- Local debug/development icon
diff --git a/tests/e2e/README.md b/tests/e2e/README.md
index 6ace789..ac154b5 100644
--- a/tests/e2e/README.md
+++ b/tests/e2e/README.md
@@ -14,7 +14,7 @@ The specs are **target-agnostic** — they drive whatever Nextcloud
instance `E2E_BASE_URL` points at. For local development that's easiest
against an existing test instance (your own NC, or the shared test
server). A reproducible Docker NC+Etherpad target for CI is a later
-phase ([#112](https://github.com/Jaggob/etherpad-integration-for-nextcloud/issues/112));
+phase ([#112](https://github.com/ether/etherpad-integration-for-nextcloud/issues/112));
because the specs only depend on `E2E_BASE_URL` and the
documented env vars, adding it won't require rewriting tests.