diff --git a/SECURITY.md b/SECURITY.md
index 98cb59bd1c..7059970bb8 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -19,6 +19,12 @@ Only the maintained branches, as listed in [`BRANCHES.md`](BRANCHES.md),
 get security fixes.
 Users are urged to always use the latest version of a maintained branch.
 
+## Use of TF-PSA-Crypto
+
+Note that Mbed TLS uses the cryptography API provided by TF-PSA-Crypto. Its
+security policy can be found
+[here](https://github.com/Mbed-TLS/TF-PSA-Crypto/blob/development/SECURITY.md).
+
 ## Threat model
 
 We classify attacks based on the capabilities of the attacker.