Security and Compliance
IBM manages the infrastructure (network, storage and compute resources) applies fixes to the application and maintains the IBM software, IBM is also responsible for the security and privacy controls for this Cloud Service. The measures implemented and maintained by IBM within this Cloud Service are subject to annual certification of compliance with ISO 27001.
Evidence of stated compliance and accreditation, such as certifications or attestations can be downloaded from here