By default, all tuto’s server’s security configurations are set to deny-all on connections inside the Virtual Private Cloud (VPC), except the required ports and services, managed through Security Groups in our cloud environment. tuto uses AWS to store our client’s data. For AWS certifications and audit reports: ISO-27001 Certification for AWS: https://aws.amazon.com/compliance/iso-27001-faqs/ SOC2 third-party audit reports for AWS: https://aws.amazon.com/compliance/soc-faqs/