Request the security
package under NDA.

Security questionnaire (CAIQ-lite), BAA template, subprocessor list, encryption & key-management summary, and incident-response plan. Delivered under NDA — usually within one business day.