We're actively pursuing SOC 2 Type II certification and follow Security, Confidentiality, Processing Integrity, and Privacy commitments. Our infrastructure is built on SOC 2 Type II certified partners (Vercel, Neon, Upstash), and we conduct annual penetration testing by external security firms.