We have an outside company analyze our source code as well as run security tests on our cloud deployment.  If you want some kind of official statement about the results, you should probably go through your regional manager.