All data is stored within our production VPC, which is isolated from the internet as well as any other environment.
We encrypt all data by default. While data is in transit during any point of its lifecycle it is, at minimum, encrypted using TLS 1.2. We also incorporate AES 256 encryption for data at rest and in use. All data is encrypted at the database level as well as the application server level.
All customer data is logically separated within our database and encryption is done using customer-specific keys that are managed using AWS KMS.