Signal's security architecture and procedures is aligned with SOC2 standards. Signal is also a Google API verified application according to the new developer standards introduced in 2019. Email security@nfx.com to submit any security vulnerability information.