Hey

I’m using Railway to deploy multiple backends for different clients.

We’re currently running a vendor security assessment and would like to better understand how Railway handles compliance, data protection, and service reliability.

Could you share (or point me to) any official information about:

• Compliance & certifications (SOC 2, ISO 27001, GDPR, etc.)
• Data security practices (encryption, MFA, access control)
• Service reliability (uptime, backups, incident response)

We’d like to include Railway in our list of approved third-party platforms and show our clients that it meets strong security standards.

Thanks a lot for any references or docs you can share