diff --git a/apps/www/pages/security.mdx b/apps/www/pages/security.mdx
index 4ec0e144a14..a58b5049a34 100644
--- a/apps/www/pages/security.mdx
+++ b/apps/www/pages/security.mdx
@@ -44,6 +44,44 @@ export const Section = ({ children, icon, img }) => (
+
Enterprise-grade
+
+
+
+
}>
+
+### SOC 2
+
+
+

+
+
+Supabase is SOC2 Type 2 compliant. This is an important security policy when handling sensitive customer data.
+
+
+
+
}>
+
+### HIPAA
+
+
+

+
+
+Supabase is HIPAA compliant. You can store Protected Health Information (PHI) on our hosted platform once you enter into a Business Associate Agreement (BAA) with us and fulfill your HIPAA obligations under our [shared responsibility model](/docs/guides/platform/shared-responsibility-model#managing-healthcare-data).
+
+
+
+
+
+SOC2 Type 2 and HIPAA are available to Enterprise and Team customers. Request to sign our BAA [on the dashboard](/dashboard/org/_/documents).
+
+
+
+
+
+
Protection for everyone
+
}>
@@ -55,33 +93,6 @@ MFA adds an additional layer of security to your user account, by requiring a se
-
}>
-
-### SOC 2
-
-Supabase is SOC2 Type 2 compliant. This is an important security policy when handling sensitive customer data.
-
-Enterprise and Team customers can access our SOC2 report [on the dashboard](/dashboard/org/_/documents).
-
-
-

-
-
-
-
-
}>
-
-### HIPAA
-
-Supabase is HIPAA compliant. You can store Protected Health Information (PHI) on our hosted platform once you enter into a Business Associate Agreement (BAA) with us and fulfill your HIPAA obligations under our [shared responsibility model](/docs/guides/platform/shared-responsibility-model#managing-healthcare-data).
-
-Enterprise and Team customers can request to sign our BAA [on the dashboard](/dashboard/org/_/documents).
-
-
-

-
-
-