We're SOC2 and HIPAA compliant, with our data encrypted at rest and in transition.