Need help to answer IT security related questions

[Auntyee]

Dear all, I'm reaching out as I have some questions in regards IT Security. I am from the creative team (within a highly regulated financial institution) and is looking to develop a game to engage my audience in Spatial. However before I can proceed, I need to obtain clearances internally from the IT Security team.. I am stuck at these questions and hope anyone here can help me out so my team and I can join ths community as a Brand Creator.

1. Is Spatial using CDN or subscribing to AWS Shield, or others? How does the Spatial protect against DDoS attack?
2. Any proof that Spatial has been independently reviewed by accredited assessor? i.e. SOC 2 Type 2, ISO 27001, OSPAR, etc.?
3. What is the password policy for Spatial? (min password length, complexity, password history, max number of failed attempts, inactivity disablement)