https://www.concretecms.com/about/legal/hosting-compliance has our most accurate security information.