diff --git a/apps/docs/pages/guides/platform/shared-responsibility-model.mdx b/apps/docs/pages/guides/platform/shared-responsibility-model.mdx
index 1d7c6e3e2ba..8f29351f4e0 100644
--- a/apps/docs/pages/guides/platform/shared-responsibility-model.mdx
+++ b/apps/docs/pages/guides/platform/shared-responsibility-model.mdx
@@ -56,6 +56,8 @@ You can use Supabase to store and process Protected Health Information (PHI). Yo
 - Enabling [Network Restrictions](/docs/guides/platform/network-restrictions).
 - Disabling [Supabase AI editor](https://supabase.com/dashboard/org/_/general) in our dashboard.
 - Encrypting PHI in your database. Consider using pgsodium's [Transparent Column Encryption](https://github.com/michelp/pgsodium#transparent-column-encryption) which comes bundled in with every Supabase project.
+- Not using [Edge functions](/docs/guides/functions) to process PHI.
+- Not storing PHI in [public Storage buckets](/docs/guides/storage/buckets/fundamentals#public-buckets).
 
 export const Page = ({ children }) => <Layout meta={meta} children={children} />