I found this on NetSuite site about Data center Fact, is there more detail document somewhere? Quality department wants to know how NetSuite protects the data.

you can ask your account manager for a SOC1 Type 2 Report which goes into some detail around this