SpamHero's servers are co-located in two DataBank data centers (one in Utah and the other in Dallas, Texas). DataBank maintains an extensive compliance program covering SSAE / SOC 1 / SOC 2, ISO 27001, PCI-DSS and several other standards.

You can read more about DataBank's compliance program here:

https://www.databank.com/data-center-compliance-enablement/

DataBank also maintains a Trust Center where certifications, reports and other security documentation are available:

https://trust.databank.com/

These audits and certifications cover DataBank and the facilities where SpamHero houses its servers. SpamHero itself is not currently SOC 1 or SOC 2 certified.