<?xml version="1.0" encoding="UTF-8"?>
<!-- clients.credicorp.co.uk — client portal sitemap. The portal is an authenticated app
     (every app page is meta-noindex + Disallow-ed in robots.txt). Only the prospect-facing
     entry points are public/indexable: the apply landing (anon-apply funnel #1770) and the
     sign-in / password-recovery entry pages. Mirrors how marketing serves /sitemap.xml
     (app/Seo/SitemapXml.php renderSitemap()): same urlset namespace + url/loc/changefreq/
     priority shape. Served as a static file by the front controller (real files in public/
     are streamed as-is before RequireAuth runs — see public/index.php + public/.htaccess). -->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url>
    <loc>https://clients.credicorp.co.uk/apply</loc>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://clients.credicorp.co.uk/login</loc>
    <changefreq>monthly</changefreq>
    <priority>0.5</priority>
  </url>
  <url>
    <loc>https://clients.credicorp.co.uk/lost-password</loc>
    <changefreq>yearly</changefreq>
    <priority>0.3</priority>
  </url>
</urlset>
