We have a new set of compliance resources up on the site that are pretty detailed. We are here to support you with your audit, security questionnaires and the like - please give us feedback! https://www.medplum.com/docs/compliance