Yes, the technical and organisational measures to ensure data security are documented in the annex to the order processing contract.