Are Heroku's data services secure and compliant with regulations like HIPAA and PCI?

“Yes. Heroku’s managed data services offer enterprise-grade security and compliance features. Heroku Shield provides a dedicated runtime environment that offers HIPAA compliance for Heroku Postgres, Key Value-Store, and Kafka and PCI DSS Level 1 for Heroku Postgres. Additionally, features like encryption-at-rest and Heroku Private Spaces allow you to isolate your data services within a secure network boundary.”