Do you have a document of where and how you store data and your other security policies?

We have a full documentation of our security policy here: https://learnamp.com/security-policy