Doesn’t look to have much security configurability. With Heroku I can pass a SOC 2 certification. This I’m not so sure.

As a hobby dev alternative to Heroku this might be fine. For a serious business I don’t see this as an alternative.