I only use their serverless stuff, but you can choose which security and compliance you want for their serverless stuff.