Authorization and authentication is handled using open source software called Keycloak. Keycloak implements best practices in case of storage and additionally the disks where the data stored are also can be encrypted. We're using the Kaa Identity and Access management which provides comprehensive, unified user resource access and permission management. It implements best practices in case of storage, and additionally the disks where the data stored are also can be encrypted.