The SpamHero servers are co-located in two data centers (one in Bluffdale, Utah, and the other in Dallas, Texas), both data centers are managed by DataBank. Databank is compliant with SSAE-18 / SOC1 / SOC2 frameworks along with several other standards. You can read about these audits here:

https://www.databank.com/compliance-enablement/ssae-18-soc1-soc2/

These audits are performed on the DataBank facilities where SpamHero houses its servers. No third-party audits have been being performed on SpamHero's operations directly.