What steps do I need to take to ensure compliance with the Modernised API?

Does the Modernised API comply with relevant regulatory standards?

What security measures are in place for the Modernised API?