Yes. We apply encryption at multiple layers:
- At Rest: All data stored on disk is encrypted using AES-256, the industry standard for strong symmetric encryption. This includes databases, object storage, and file systems.
- In Transit: All communication between your browser and our servers, as well as internal service-to-service traffic, is encrypted using TLS 1.2+ with modern cipher suites. We enforce HSTS to prevent downgrade attacks.
- Backups: Backup snapshots are encrypted before leaving the primary storage layer and remain encrypted at rest in the backup destination.