You can find a list of our technical and organisational measures (TOMs) in annex 3 of our Data Processing Agreement (DPA). We linked the list for you here.