Security, certifications, etc

Hi,

I've been asked by my organization to evaluate the security posture of https://h5p.com.

In order to do this I need a few things, and thought it might be simpler to reach out here than to scour the website, or ask on LinkedIn or wherever.

• Do the datacentres you host in have ISO 27001 or SOCx certification? Are they owned by a public cloud vendor or someone else?
• I see that SSO is only available with "custom" pricing. What does that entail? We will require our colleagues to configure it, so I want to know as soon as possible if I have to tell them they can't use the service.

Thank you!