I want to learn more about Galaxy's security hygiene. I also want to learn more about what reasonable steps Galaxy is taking right now to ensure our data is safe after we `meteor deploy`.

Are they compliant with any security accountability programs like FEDRAMP/FISMA, ISO 27002, PCI-DSS and HIPAA?