The hosting environment for production systems is equipped with appropriate physical security controls, and responsibility for those controls belongs to the subservice organization, so that physical protection is managed by the hosting provider.

which is equipped with appropriate physical security controls

— Pyrana Information Security Policy.pdf

and is the responsibility of subservice organization

— Pyrana Information Security Policy.pdf

Physical security and environmental controls have been implemented

— Pyrana Information Security Policy.pdf