Trust
The trust page is being written.
What's coming: data handling policy, subprocessor list, security practices, and insurance details once the policies are bound. Today's state: solo operator, sole proprietorship, no client data on personal devices, MFA on every account.
In the meantime: if your legal team needs answers now, email and I'll respond with specifics.