We have in place the best practices for software engineers.

We have a multi-tenant database (each customer has its own data partitioned and separated from the rest) to add a layer of security.