The Gateway implements OAuth 2.0 protocol for security which is definitely the OSI Layer 7 (yes, the company's previous name). It also uses certificates and SSL for transport security (Layer 4). As you can see in the Routing section of the diagram, this mentions L2/L4 and layer 4 load balancing.