Many thanks for the reply. This does answer most of my concerns and will help me with my recommendation to my customer (the first couple of paragraphs was what I was really looking for).
I have been with your company for a few years now and have not had any issues in terms of data security (apart from it being too strict on my first shared account - but you even sorted that out) and all this insistent probing was just so that I can get a bit more information about your formal procedures and satisfy my customer that my technology provider
can offer them a solution that will fit their needs.