Espo security status

[tgr]

Has Espo undergone a security audit or verification? Do you have a documented security strategy to enforce safe development? OWASP ASVS or something like...