Cesium Security Certification

We’re keen on making use of Cesium as a platform and need to make sure that it conforms to certain security protocols we have as an organisation. Is there any information available on this and/or what would be the best way to find out more?
Many thanks!

Bumping politely as any help here would be great!