The hosting environment for production systems is equipped with appropriate physical security controls and that responsibility belongs to the subservice organization so that physical protection duties are assigned to the hosting provider.

which is equipped with appropriate physical security controls

— Pyrana Information Security Policy.pdf

and is the responsibility of subservice organization

— Pyrana Information Security Policy.pdf

Physical security and environmental controls have been implemented

— Pyrana Information Security Policy.pdf