We're publishing the long-form security page after our SOC 2 Type II report lands. Until then, the fastest path is a 20-minute call — we'll walk you through the control framework, sub-processor list, and pen-test summary under NDA.