We are in the process of getting SOC2 compliant. You can go through our trust page here: https://trust.alterauth.com/

We have also gotten pen tested 2 separate times and have found no issues. You can find the result of one of the pen tests on the trust center