How does RStudio Cloud protect user data?

I use RStudio Cloud to teach a course and currently we use a sample data from public sources. I am preparing to ask my institution for permission to let my students upload de-identified data owned by our institution to use in this course.

I anticipate being asked what technical safeguards RStudio Cloud uses to protect data in motion and at rest. Do you have a document that I should refer them to?

Thanks.

-- Alex